Vulnerabilities
Misconfiguration
Runtime Security
Compliance
CVE Vulnerabilities

CVE-2016-6406

Published: Sep 22, 2016 | Modified: Jul 30, 2017
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
10 HIGH
AV:N/AC:L/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
Additional information
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-6406
CWEhttps://cwe.mitre.org/data/definitions/264.html

Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing/debugging interface, aka Bug ID CSCvb26017.

Affected Software

Name Vendor Start Version End Version
Email_security_appliance_firmware Cisco 9.1.2-023 9.1.2-023
Email_security_appliance_firmware Cisco 9.1.2-028 9.1.2-028
Email_security_appliance_firmware Cisco 9.1.2-036 9.1.2-036
Email_security_appliance_firmware Cisco 9.7.2-046 9.7.2-046
Email_security_appliance_firmware Cisco 9.7.2-047 9.7.2-047
Email_security_appliance_firmware Cisco 9.7.2-054 9.7.2-054
Email_security_appliance_firmware Cisco 10.0.0-124 10.0.0-124
Email_security_appliance_firmware Cisco 10.0.0-125 10.0.0-125

References

Aqua Security is the largest pure-play cloud native security company, providing customers the freedom to innovate and run their businesses with minimal friction. The Aqua Cloud Native Security Platform provides prevention, detection, and response automation across the entire application lifecycle to secure the build, secure cloud infrastructure and secure running workloads wherever they are deployed.
Copyright © 2023 Aqua Security Software Ltd.   Privacy Policy | Terms of Use