Description
The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.
References
- 93088 vdb-entry
- 20160921 Cisco Application-Hosting Framework HTTP Header Injection Vulnerability vendor-advisory
- 1036874 vdb-entry