CVE-2016-6377

Severity: high (CVSS 8.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-03 · updated 2026-06-17
Weakness: CWE-287

Description

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.

Affected products

Cisco Media Origination System Suite: 2.3(1), 2.3(2), 2.3(6), 2.3(7), 2.3(8), 2.3_base (+6)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp
http://www.securityfocus.com/bid/92715
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-vmp
http://www.securityfocus.com/bid/92715

Get alerted when CVE-2016-6377 or the next vulnerability affects your stack