CVE-2016-6377
Summary
| CVE | CVE-2016-6377 |
|---|---|
| State | PUBLISHED |
| Assigner | cisco |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2016-09-03 20:59:08 UTC |
| Updated | 2026-05-06 22:30:45 UTC |
| Description | Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110. |
Risk And Classification
Primary CVSS: v3.0 8.1 HIGH from [email protected]
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 0.012690000 probability, percentile 0.667170000 (date 2026-07-22)
Problem Types: CWE-287 | n/a
| Version | Source | Type | Score | Severity | Vector |
|---|---|---|---|---|---|
| 3.0 | [email protected] | Primary | 8.1 | HIGH | CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| 2.0 | [email protected] | Primary | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
CVSS v3.0 Breakdown
Attack Vector
NetworkAttack Complexity
HighPrivileges Required
NoneUser Interaction
NoneScope
UnchangedConfidentiality
HighIntegrity
HighAvailability
HighCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v2.0 Breakdown
Access Vector
NetworkAccess Complexity
MediumAuthentication
NoneConfidentiality
PartialIntegrity
PartialAvailability
PartialAV:N/AC:M/Au:N/C:P/I:P/A:P
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Cisco | Media Origination System Suite | 2.3\(1\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.3\(2\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.3\(6\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.3\(7\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.3\(8\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.3_base | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.4\(1\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.4_base | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.5\(0\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.5\(1\) | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.5_base | All | All | All |
| Application | Cisco | Media Origination System Suite | 2.6_base | All | All | All |
Vendor Declared Affected Products
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco Virtual Media Packager CVE-2016-6377 Unauthorized Access Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | www.securityfocus.com | |
| Cisco Virtual Media Packager PAM API Unauthorized Access Vulnerability | af854a3a-2127-422b-91ae-364da2661108 | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.