Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-1302

Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before 11.0(3h) and 11.1 before 11.1(1j) allow remote authenticated users to bypass intended RBAC restrictions via crafted REST requests, aka Bug ID CSCut12998.

Published

2016-02-07T11:59:01.943

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 8.8 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.0

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-284
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System samsung x14j_firmware t-ms14jakucb-1102.5 Yes
Operating System sun opensolaris snv_124 Yes
Operating System zyxel gs1900-10hp_firmware < 2.50\(aazi.0\)c0 Yes
Operating System zzinc keymouse_firmware 3.08 Yes
Hardware cisco nexus_92160yc-x - No
Hardware cisco nexus_92304qc - No
Hardware cisco nexus_9236c - No
Hardware cisco nexus_9272q - No
Hardware cisco nexus_93108tc-ex - No
Hardware cisco nexus_93120tx - No
Hardware cisco nexus_93128tx - No
Hardware cisco nexus_93180yc-ex - No
Hardware cisco nexus_9332pq - No
Hardware cisco nexus_9336pq_aci_spine - No
Hardware cisco nexus_9372px - No
Hardware cisco nexus_9372tx - No
Hardware cisco nexus_9396px - No
Hardware cisco nexus_9396tx - No
Hardware cisco nexus_9504 - No
Hardware cisco nexus_9508 - No
Hardware cisco nexus_9516 - No
Operating System cisco nx-os base Yes
Operating System sun opensolaris snv_124 Yes
Operating System zyxel gs1900-10hp_firmware < 2.50\(aazi.0\)c0 Yes
Operating System zzinc keymouse_firmware 3.08 Yes
References