A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Med…

Published 10 y ago 2016-10-28 · modified 4 mo ago 2026-06-17 · JSON

CVSS

9.8

v3.0 · NVD

CISA KEV

not known exploited

EPSS

2.2%

percentile 82%

Public exploits

none known

A vulnerability in the interdevice communications interface of the Cisco IP Interoperability and Collaboration System (IPICS) Universal Media Services (UMS) could allow an unauthenticated, remote attacker to modify configuration parameters of the UMS and cause the system to become unavailable. Affected Products: This vulnerability affects Cisco IPICS releases 4.8(1) to 4.10(1). More Information: CSCva46644. Known Affected Releases: 4.10(1) 4.8(1) 4.8(2) 4.9(1) 4.9(2).

Exploit prediction (EPSS)

2.17% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
NVD	3.0	9.8	`CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	10.0	`AV:N/AC:L/Au:N/C:C/I:C/A:C`

Affected products

n/a Cisco IPICS 4.8(1) to 4.10(1)

Classification

Weakness

CWE-287 Improper Authentication

References

tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-ipics · x_refsource_CONFIRM, x_transferred
securityfocus.com /bid/93913 · vdb-entry, x_refsource_BID, x_transferred

Sources

CVE List: CVE-2016-6397
NVD: CVE-2016-6397

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.