CVE-2016-6412

published 2016-09-24

CVE-2016-6412: The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle…

medium 6.5 CVSS 3.0

AV N AC L PR N UI R S U C N I H A N

The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE, when the IOx feature set is enabled, allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers, aka Bug ID CSCuz84773.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	application-hosting_framework_http_header	—	—
cisco	ios	—	—

CWE-20