CVE-2016-9091

EUVD-2016-9912
Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 and Content Analysis System (CAS) 1.3 before 1.3.7.4 are susceptible to an OS command injection vulnerability. An authenticated malicious administrator can execute arbitrary OS commands with elevated system privileges.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
bluecoatadvanced_secure_gateway
𝑥
≤ 6.6.5.2
bluecoatcontent_analysis_system_software
𝑥
≤ 1.3.7.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/97372
https://bto.bluecoat.com/security-advisory/sa138
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/
http://www.securityfocus.com/bid/97372
https://bto.bluecoat.com/security-advisory/sa138
https://www.exploit-db.com/exploits/41785/
https://www.exploit-db.com/exploits/41786/