CVE-2016-6374

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Sep 22, 2016 (Sep 22, 2016)

Modified

Jun 17, 2026

Description

Cisco Cloud Services Platform (CSP) 2100 2.0 allows remote attackers to execute arbitrary code via a crafted dnslookup command in an HTTP request, aka Bug ID CSCuz89093.

Vendors: cisco
Products: cloud services platform 2100
Weakness: CWE-20
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.7%)

In the news2 stories

Cisco plugs two Cloud Services Platform system compromise flaws

Help Net SecuritySep 22, 00:00 UTC · Sep 22, 2016Exploit / PoC CVE-2016-6373 CVE-2016-6374

CVE-2016-6374 -Don't waste time, patch your CISCO Cloud Services Platform

Security AffairsSep 22, 11:37 UTC · Sep 22, 2016Vulnerability CVE-2016-6374