CVE-2016-9199: Cisco Iox

Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days.

A vulnerability in the Cisco application-hosting framework (CAF) of Cisco IOx could allow an authenticated, remote attacker to read arbitrary files on a targeted system. Affected Products: This vulnerability affects specific releases of the Cisco IOx subsystem of Cisco IOS and IOS XE Software. More Information: CSCvb23331. Known Affected Releases: 15.2(6.0.57i)E CAF-1.1.0.0.

Affected products

• Cisco Iox: version 1.1.0 only

Published 2016-12-14. Last modified 2026-06-17.