CVE-2016-9867

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2017-01-06 · updated 2026-06-17
Weakness: CWE-264

Description

An issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker may be able to modify the kernel memory in the SCINI driver and may achieve code execution to escalate privileges to root on ScaleIO Data Client (SDC) servers.

Affected products

EMC ScaleIO versions before 2.0.1.1: through 2.0.1.0

References

http://www.securityfocus.com/archive/1/539983/30/0/threaded
http://www.securityfocus.com/bid/95300
http://www.securityfocus.com/archive/1/539983/30/0/threaded
http://www.securityfocus.com/bid/95300

Get alerted when CVE-2016-9867 or the next vulnerability affects your stack