CVE-2016-1335 Privilege escalation in n/a
Authenticated users can gain administrator privileges by connecting from an endpoint previously used by an admin due to SSH mishandling.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-1335?
CVE-2016-1335 is a high-severity vulnerability in n/a, published on 19 Feb 2016. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
The SSH implementation in Cisco StarOS before 19.3.M0.62771 and 20.x before 20.0.M0.62768 on ASR 5000 devices mishandles a multi-user public-key authentication configuration, which allows remote authenticated users to gain privileges by establishing a connection from an endpoint that was previously used for an administrator's connection, aka Bug ID CSCux22492.
Weakness: CWE-264
Which versions are affected by CVE-2016-1335?
It affects 1 product.
Products include Cisco Asr 5000 Series Software.
How do I fix CVE-2016-1335?
No fix has been published for CVE-2016-1335 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-1335 being exploited?
There is no known exploitation of CVE-2016-1335 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-3819 Privilege escalation in Cisco StarOS
- CVE-2017-6612 Open redirect in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2017-6672 Security feature bypass in Cisco ASR 5000 Series Aggregation Services Routers
- CVE-2016-6467 Denial of service in Cisco Aggregation Services Router (ASR) 5000 Series Switch
- CVE-2016-9203 Denial of service in Cisco ASR 5000
Sources
Also known as GHSA-8vpj-6xx8-gx4p.