CVE-2016-8021 Vulnerability Details

  /     /     /  

CVE-2016-8021 Metadata Quick Info

CVE Published: 14/03/2017 | CVE Updated: 06/08/2024 | CVE Year: 2016
Source: intel | Vendor: Intel | Product: VirusScan Enterprise Linux (VSEL)
Status : PUBLISHED

---

CVE-2016-8021 Description

Improper verification of cryptographic signature vulnerability in Intel Security VirusScan Enterprise Linux (VSEL) 2.0.3 (and earlier) allows remote authenticated users to spoof update server and execute arbitrary code via a crafted input file.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Improper verification of cryptographic signature vulnerability
Source: Intel

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).