CVE-2016-1365: Input Validation
The Grapevine update process in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0 allows remote authenticated users to execute arbitrary commands as root via a crafted upgrade parameter, aka Bug ID CSCux15507.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1365?
CVE-2016-1365 has a high severity rating due to its potential to allow remote authenticated users to execute arbitrary commands as root.
How do I fix CVE-2016-1365?
To fix CVE-2016-1365, update the Cisco Application Policy Infrastructure Controller Enterprise Module to version 1.0.10 or later.
Who is affected by CVE-2016-1365?
CVE-2016-1365 affects users of Cisco Application Policy Infrastructure Controller Enterprise Module version 1.0.10.
What types of attacks can be executed through CVE-2016-1365?
CVE-2016-1365 allows attackers to execute arbitrary commands with root privileges, posing a significant security risk.
Is CVE-2016-1365 easy to exploit?
Yes, CVE-2016-1365 can be exploited by remote authenticated users with crafted upgrade parameters, making it relatively straightforward.