CVE-2016-6377: Cisco Media Origination System Suite

High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days.

Media Origination System Suite Software 2.6 and earlier in Cisco Virtual Media Packager (VMP) allows remote attackers to bypass authentication and make arbitrary Platform and Applications Manager (PAM) API calls via unspecified vectors, aka Bug ID CSCuz52110.

Affected products

• Cisco Media Origination System Suite: version 2.3(1) only; version 2.3(2) only; version 2.3(6) only; version 2.3(7) only; version 2.3(8) only; version 2.3_base only; …

Published 2016-09-03. Last modified 2026-06-17.