CVE-2016-9210: Path Traversal
First published: Wed Dec 14 2016(Updated: )
A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.5(1.11007.2). Known Fixed Releases: 12.0(0.98000.168) 12.0(0.98000.178) 12.0(0.98000.399) 12.0(0.98000.510) 12.0(0.98000.536) 12.0(0.98500.7).
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Unified Communications Manager Session Management Edition | =11.5\(1.11007.2\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-9210?
CVE-2016-9210 is classified as a high-severity vulnerability due to the potential for unauthenticated remote file modification.
How do I fix CVE-2016-9210?
To fix CVE-2016-9210, update your Cisco Unified Communications Manager to a fixed release that addresses the vulnerability.
What are the affected software versions for CVE-2016-9210?
CVE-2016-9210 affects Cisco Unified Communications Manager version 11.5(1.11007.2).
Can CVE-2016-9210 be exploited remotely?
Yes, CVE-2016-9210 can be exploited by an unauthenticated remote attacker.
What is the impact of CVE-2016-9210?
The impact of CVE-2016-9210 allows attackers to modify arbitrary files on the system, potentially compromising integrity and availability.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/author
- agent/event
- agent/first-publish-date
- agent/description
- agent/trending
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco unified communications manager session management edition
- version/cisco unified communications manager session management edition/11.5\(1.11007.2\)