CVE-2016-1456

Name of the Vulnerable Software and Affected Versions Cisco IOS XR versions 6.x through 6.0.1

Description The issue allows local users to execute arbitrary OS commands in a privileged context by leveraging unspecified container access. This is due to insufficient input validation, which could be exploited by submitting crafted input to a command in a specific container, allowing an attacker to execute arbitrary commands on the affected system with root privileges.

Recommendations For versions 6.x through 6.0.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.