Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.1
CVE-2016-6377: Cisco Media Origination System Suite lets remote users bypass login
CVE-2016-6377 · published 10 years ago
Summary
Versions 2.6 and earlier of Cisco's Media Origination System Suite can be accessed without proper authentication, allowing outsiders to send commands to the platform's management interface. This could let attackers control or disrupt media services. Upgrade to a newer version or apply the vendor's security patch as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | media_origination_system_suite |
2.3\(1\) 2.3\(2\) 2.3\(6\) 2.3\(7\) 2.3\(8\) 2.3_base 2.4\(1\) 2.4_base 2.5\(0\) 2.5\(1\) 2.5_base 2.6_base cpe:2.3:a:cisco:media_origination_system_suite:2.3\(1\):*:*:*:*:*:*:* |
Original advisory text
Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (...
Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-287Improper Authentication
Timeline
Published3 Sep 2016
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-6377 · NVD
Track software like this
Free during beta