PT-2016-6942

CVE-2016-6470

·

Published

2016-12-14

·

Updated

2017-01-05

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco Hybrid Media Service version 1.0
Description A vulnerability in the installation procedure could allow an authenticated, local attacker to elevate privileges to the root level.
Recommendations For Cisco Hybrid Media Service version 1.0, update the installation procedure to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2016-6470
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com