Unscored CVE-2016-6414 EUVD-2016-7337GHSA-j6mp-pxmq-5rv6

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux comma…

Published Sep 22, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

iox in Cisco IOS, possibly 15.6 and earlier, and IOS XE, possibly 3.18 and earlier, allows local users to execute arbitrary IOx Linux commands on the guest OS via crafted iox command-line options, aka Bug ID CSCuz59223.

References

1036876 vdb-entry
93091 vdb-entry
20160921 Cisco IOS and IOS XE iox Command Injection Vulnerability vendor-advisory