CVE-2016-1420: Cisco Application Infrastructure Controller

High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days.

The installation component on Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.3(2f) mishandles binary files, which allows local users to obtain root access via unspecified vectors, aka Bug ID CSCuz72347.

Affected products

• Cisco Application Infrastructure Controller
• Cisco Application Policy Infrastructure Controller Firmware: version 1.0(1e) only; version 1.0(1h) only; version 1.0(1k) only; version 1.0(1n) only; version 1.0(2j) only; version 1.0(2m) only; …

Published 2016-06-10. Last modified 2026-06-17.