VDB

CVE-2016-9223

CVE-2016-9223 PUBLISHED CVSS 10 CRITICAL

A vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO; formerly CliQr) could allow an unauthenticated, remote attacker to install Docker containers with high privileges on the affected system. Affected Products: This vulnerability affect all releases of Cisco CloudCenter Orchestrator (CCO) deployments where the Docker Engine TCP port 2375 is open on the system and bound to local address 0.0.0.0 (any interface).

EPSS 1.75% · 82.9th percentile

Risk Scores

CVSS 2.0
10
EPSS Score
1.75%
82.9th percentile

Affected Products

VendorProductVersions
n/aCisco CloudCenter OrchestratorCisco CloudCenter Orchestrator
ciscocloudcenter_orchestrator4.5.0, 4.6.0, 4.6.1

Timeline

  • Dec 21, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 16, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›