Details of VAR-201612-0166

ID

VAR-201612-0166

CVE

CVE-2016-6474

TITLE

Cisco IOS and IOS XE Software Authentication Bypass Vulnerability

Trust: 1.2

sources: CNVD: CNVD-2016-12229 // CNNVD: CNNVD-201612-202

DESCRIPTION

A vulnerability in the implementation of X.509 Version 3 for SSH authentication functionality in Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to bypass authentication on an affected system. More Information: CSCuv89417. Known Affected Releases: 15.5(2.25)T. Known Fixed Releases: 15.2(4)E1 15.2(4)E2 15.2(4)E3 15.2(4)EA4 15.2(4.0r)EB 15.2(4.1.27)EB 15.2(4.4.2)EA4 15.2(4.7.1)EC 15.2(4.7.2)EC 15.2(5.1.1)E 15.2(5.5.63)E 15.2(5.5.64)E 15.4(1)IA1.80 15.5(3)M1.1 15.5(3)M2 15.5(3)S1.4 15.5(3)S2 15.6(0.22)S0.12 15.6(1)T0.1 15.6(1)T1 15.6(1.15)T 15.6(1.17)S0.7 15.6(1.17)SP 15.6(1.22.1a)T0 15.6(2)S 15.6(2)SP 16.1(1.24) 16.1.2 16.2(0.247) 16.3(0.11) 3.8(1)E Denali-16.1.2. This may lead to further attacks. This issue is tracked by Cisco Bug ID CSCuv89417. An attacker could exploit this vulnerability to impersonate a user by sending an invalid X.50 signature to an affected system

Trust: 2.52

sources: NVD: CVE-2016-6474 // JVNDB: JVNDB-2016-006313 // CNVD: CNVD-2016-12229 // BID: 94773 // VULHUB: VHN-95294

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2016-12229

AFFECTED PRODUCTS

vendor:	cisco	model:	ios	scope:	eq	version:	15.5\(2.25\)t	Trust: 1.6
vendor:	cisco	model:	ios	scope:	eq	version:	15.5(2.25)t	Trust: 0.8
vendor:	cisco	model:	ios xe software all	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios software all	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	ios xe software	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	ios software	scope:	eq	version:	0	Trust: 0.3

sources: CNVD: CNVD-2016-12229 // BID: 94773 // JVNDB: JVNDB-2016-006313 // CNNVD: CNNVD-201612-202 // NVD: CVE-2016-6474

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2016-6474
value:	HIGH
Trust: 1.0
NVD:	CVE-2016-6474
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2016-12229
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201612-202
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-95294
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2016-6474
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2016-12229
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-95294
severity:	MEDIUM
baseScore:	5.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	8.6
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2016-6474
baseSeverity:	HIGH
baseScore:	7.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	LOW
availabilityImpact:	LOW
exploitabilityScore:	3.9
impactScore:	3.4
version:	3.0
Trust: 1.8

sources: CNVD: CNVD-2016-12229 // VULHUB: VHN-95294 // JVNDB: JVNDB-2016-006313 // CNNVD: CNNVD-201612-202 // NVD: CVE-2016-6474

PROBLEMTYPE DATA

problemtype:

CWE-287

Trust: 1.9

sources: VULHUB: VHN-95294 // JVNDB: JVNDB-2016-006313 // NVD: CVE-2016-6474

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201612-202

TYPE

authorization issue

Trust: 0.6

sources: CNNVD: CNNVD-201612-202

CONFIGURATIONS

sources: JVNDB: JVNDB-2016-006313

PATCH

title:	cisco-sa-20161207-ios-xe-x509	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios-xe-x509	Trust: 0.8
title:	Patches for Cisco IOS and IOS XE Software Authentication Bypass Vulnerabilities	url:	https://www.cnvd.org.cn/patchInfo/show/85529	Trust: 0.6
title:	Cisco IOS and IOS XE Software Fixes for authentication bypassing vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=66243	Trust: 0.6

sources: CNVD: CNVD-2016-12229 // JVNDB: JVNDB-2016-006313 // CNNVD: CNNVD-201612-202

EXTERNAL IDS

db:	NVD	id:	CVE-2016-6474	Trust: 3.4
db:	BID	id:	94773	Trust: 2.6
db:	SECTRACK	id:	1037420	Trust: 1.1
db:	JVNDB	id:	JVNDB-2016-006313	Trust: 0.8
db:	CNNVD	id:	CNNVD-201612-202	Trust: 0.7
db:	CNVD	id:	CNVD-2016-12229	Trust: 0.6
db:	VULHUB	id:	VHN-95294	Trust: 0.1

sources: CNVD: CNVD-2016-12229 // VULHUB: VHN-95294 // BID: 94773 // JVNDB: JVNDB-2016-006313 // CNNVD: CNNVD-201612-202 // NVD: CVE-2016-6474

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20161207-ios-xe-x509	Trust: 2.6
url:	http://www.securityfocus.com/bid/94773	Trust: 1.7
url:	http://www.securitytracker.com/id/1037420	Trust: 1.1
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6474	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6474	Trust: 0.8
url:	http://www.cisco.com/	Trust: 0.3

sources: CNVD: CNVD-2016-12229 // VULHUB: VHN-95294 // BID: 94773 // JVNDB: JVNDB-2016-006313 // CNNVD: CNNVD-201612-202 // NVD: CVE-2016-6474

CREDITS

The vendor reported this issue.

Trust: 0.3

sources: BID: 94773

SOURCES

db:	CNVD	id:	CNVD-2016-12229
db:	VULHUB	id:	VHN-95294
db:	BID	id:	94773
db:	JVNDB	id:	JVNDB-2016-006313
db:	CNNVD	id:	CNNVD-201612-202
db:	NVD	id:	CVE-2016-6474

LAST UPDATE DATE

2024-11-23T23:09:06.845000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2016-12229	date:	2016-12-14T00:00:00
db:	VULHUB	id:	VHN-95294	date:	2017-01-05T00:00:00
db:	BID	id:	94773	date:	2016-12-20T00:08:00
db:	JVNDB	id:	JVNDB-2016-006313	date:	2016-12-20T00:00:00
db:	CNNVD	id:	CNNVD-201612-202	date:	2016-12-12T00:00:00
db:	NVD	id:	CVE-2016-6474	date:	2024-11-21T02:56:12.197

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2016-12229	date:	2016-12-14T00:00:00
db:	VULHUB	id:	VHN-95294	date:	2016-12-14T00:00:00
db:	BID	id:	94773	date:	2016-12-07T00:00:00
db:	JVNDB	id:	JVNDB-2016-006313	date:	2016-12-20T00:00:00
db:	CNNVD	id:	CNNVD-201612-202	date:	2016-12-09T00:00:00
db:	NVD	id:	CVE-2016-6474	date:	2016-12-14T00:59:14.160