{"api_version":"1","generated_at":"2026-07-24T03:42:29+00:00","cve":"CVE-2016-6377","urls":{"html":"https://cve.report/CVE-2016-6377","api":"https://cve.report/api/cve/CVE-2016-6377.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2016-6377","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2016-6377"},"summary":{"title":"CVE-2016-6377","description":"Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.","state":"PUBLISHED","assigner":"cisco","published_at":"2016-09-03 20:59:08","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-287","n/a"],"metrics":[{"version":"3.0","source":"nvd@nist.gov","type":"Primary","score":"8.1","severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","data":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"}},{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"6.8","severity":"","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/92715","name":"http://www.securityfocus.com/bid/92715","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Virtual Media Packager CVE-2016-6377 Unauthorized Access Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp","name":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Virtual Media Packager PAM API Unauthorized Access Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-6377","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-6377","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3\\(2\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3\\(6\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3\\(7\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3\\(8\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.3_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.4\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.4_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.5\\(0\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.5\\(1\\)","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.5_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2016","cve_id":"6377","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"media_origination_system_suite","cpe6":"2.6_base","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2016","cve_id":"6377","cve":"CVE-2016-6377","epss":"0.012690000","percentile":"0.667370000","score_date":"2026-07-23","updated_at":"2026-07-24 00:10:14"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T01:29:19.663Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"20160831 Cisco Virtual Media Packager PAM API Unauthorized Access Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp"},{"name":"92715","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/92715"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2016-08-31T00:00:00.000Z","descriptions":[{"lang":"en","value":"Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-11-25T19:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"20160831 Cisco Virtual Media Packager PAM API Unauthorized Access Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp"},{"name":"92715","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/92715"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2016-6377","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"20160831 Cisco Virtual Media Packager PAM API Unauthorized Access Vulnerability","refsource":"CISCO","url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp"},{"name":"92715","refsource":"BID","url":"http://www.securityfocus.com/bid/92715"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2016-6377","datePublished":"2016-09-03T20:00:00.000Z","dateReserved":"2016-07-26T00:00:00.000Z","dateUpdated":"2024-08-06T01:29:19.663Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2016-09-03 20:59:08","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-287","n/a"],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":8.1,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"HIGH","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":2.2,"impactScore":5.9}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:M/Au:N/C:P/I:P/A:P","baseScore":6.8,"accessVector":"NETWORK","accessComplexity":"MEDIUM","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"MEDIUM","exploitabilityScore":8.6,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"C9208E81-EF4E-42C9-BD77-E9FD19E0DAF5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(2\\):*:*:*:*:*:*:*","matchCriteriaId":"E18E4E92-75BA-4791-A17B-B069864AD0FB"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(6\\):*:*:*:*:*:*:*","matchCriteriaId":"9A39D6F2-7AEA-447E-ACE3-5F1FAC41ADE3"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(7\\):*:*:*:*:*:*:*","matchCriteriaId":"39D20688-639B-4CFB-A31A-A9FBAA7873F4"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3\\(8\\):*:*:*:*:*:*:*","matchCriteriaId":"5B00B321-8410-4B7E-9C1A-908916002C08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.3_base:*:*:*:*:*:*:*","matchCriteriaId":"657B0047-458F-45B0-8200-DE4FF9536283"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.4\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"45AE1B53-2C49-4D8E-89BA-86A65C60CC3D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.4_base:*:*:*:*:*:*:*","matchCriteriaId":"AB69C075-898A-4C2C-8172-B133994BD2CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.5\\(0\\):*:*:*:*:*:*:*","matchCriteriaId":"666089F8-6F75-4451-852E-7AB92DD458F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.5\\(1\\):*:*:*:*:*:*:*","matchCriteriaId":"06F11D6D-F518-4968-B2EB-6B2F0F5AB4A5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.5_base:*:*:*:*:*:*:*","matchCriteriaId":"D74A63A5-EBB3-4480-9C0B-BCB9735C73C5"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:media_origination_system_suite:2.6_base:*:*:*:*:*:*:*","matchCriteriaId":"CD08F1E3-2D1F-4575-BECB-A2FF39E97813"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2016","CveId":"6377","Ordinal":"1","Title":"CVE-2016-6377","CVE":"CVE-2016-6377","Year":"2016"},"notes":[{"CveYear":"2016","CveId":"6377","Ordinal":"1","NoteData":"Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.","Type":"Description","Title":"CVE-2016-6377"},{"CveYear":"2016","CveId":"6377","Ordinal":"2","NoteData":"2016-09-03","Type":"Other","Title":"Published"},{"CveYear":"2016","CveId":"6377","Ordinal":"3","NoteData":"2016-11-25","Type":"Other","Title":"Modified"}]}}}