[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwUhOGtODOwKMaZ9G7QBcfeGiM1XE1_WvccY6mOk30eI":3,"g5a-risk:CVE-2016-6406":152},{"success":4,"data":5,"meta":150},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":41,"epssPercentile":28,"epssTimeSeries":42,"severity":43,"affectedProducts":44,"affectedProductsCount":71,"references":72,"referencesCount":94,"weaknesses":95,"weaknessesCount":99,"isActivelyExploited":39,"cisaInfo":28,"otxData":28,"relatedBlogPosts":100,"seoMetadata":101,"configurations":126,"relatedVendorCves":148,"notableEvents":149},"CVE-2016-6406","What is CVE-2016-6406?","Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices, when Enrollment Client before 1.0.2-065 is installed, allows remote attackers to obtain root access via a connection to the testing\u002Fdebugging interface, aka Bug ID CSCvb26017.","Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0-124, and 10.0.0-125 on Email Security Appliance (ESA) devices...","2016-09-22T22:59:22.193","2026-06-17T00:50:58.523",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":31,"CVSSMetricV40":40},[],[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":29,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",null,3.9,5.9,[32],{"Source":18,"Type":19,"CVSSData":33,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":37,"ACInsufInfo":39,"ObtainAllPrivilege":4,"ObtainUserPrivilege":39,"ObtainOtherPrivilege":39,"UserInteractionRequired":39},{"Version":34,"VectorString":35,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":36,"IntegrityImpact":36,"AvailabilityImpact":36,"BaseScore":37,"BaseSeverity":38,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE",10,"",false,[],0.03574,[41,41,41,41,41,41,41],"Critical",[45,50,53,56,59,62,65,68],{"vendor":46,"product":47,"version":48,"criteria":49,"vulnerable":4},"cisco","email_security_appliance_firmware","9.1.2-023","cpe:2.3:o:cisco:email_security_appliance_firmware:9.1.2-023:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":51,"criteria":52,"vulnerable":4},"9.1.2-028","cpe:2.3:o:cisco:email_security_appliance_firmware:9.1.2-028:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":54,"criteria":55,"vulnerable":4},"9.1.2-036","cpe:2.3:o:cisco:email_security_appliance_firmware:9.1.2-036:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":57,"criteria":58,"vulnerable":4},"9.7.2-046","cpe:2.3:o:cisco:email_security_appliance_firmware:9.7.2-046:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":60,"criteria":61,"vulnerable":4},"9.7.2-047","cpe:2.3:o:cisco:email_security_appliance_firmware:9.7.2-047:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":63,"criteria":64,"vulnerable":4},"9.7.2-054","cpe:2.3:o:cisco:email_security_appliance_firmware:9.7.2-054:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":66,"criteria":67,"vulnerable":4},"10.0.0-124","cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-124:*:*:*:*:*:*:*",{"vendor":46,"product":47,"version":69,"criteria":70,"vulnerable":4},"10.0.0-125","cpe:2.3:o:cisco:email_security_appliance_firmware:10.0.0-125:*:*:*:*:*:*:*",8,[73,78,84,88,90,92],{"url":74,"source":75,"tags":76},"http:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20160922-esa","Cisco",[77],"Vendor Advisory",{"url":79,"source":80,"tags":81},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F93116","Securityfocus",[82,83],"Third Party Advisory","VDB Entry",{"url":85,"source":86,"tags":87},"http:\u002F\u002Fwww.securitytracker.com\u002Fid\u002F1036881","Securitytracker",[],{"url":74,"source":75,"tags":89},[77],{"url":79,"source":80,"tags":91},[82,83],{"url":85,"source":86,"tags":93},[],6,[96],{"id":97,"name":97,"description":98},"Unknown","CWE-264",1,[],{"title":102,"metaDescription":103,"keywords":104,"canonicalUrl":105,"structuredData":106},"What is CVE-2016-6406? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2016-6406, a critical severity cyber security vulnerability from 2016. Cisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, ...","CVE-2016-6406, CVE-2016-6406 vulnerability, CVE-2016-6406 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2016, CVSS score, exploit, patch, remediation, cisco security, email_security_appliance_firmware vulnerability","\u002Fwhat-is\u002Fcve-2016-6406",{"@context":107,"@type":108,"headline":102,"description":103,"datePublished":10,"dateModified":11,"author":109,"publisher":113,"about":117,"mainEntityOfPage":121,"articleSection":124,"keywords":125},"https:\u002F\u002Fschema.org","TechArticle",{"@type":110,"name":111,"url":112},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":110,"name":111,"url":112,"logo":114},{"@type":115,"url":116},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":118,"name":6,"description":119,"additionalType":120},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":122,"@id":123},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2016-6406","Cybersecurity","CVE-2016-6406, CVE-2016-6406 vulnerability, CVE-2016-6406 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[127],{"Operator":28,"Negate":28,"Nodes":128},[129],{"Operator":130,"Negate":39,"CPEMatch":131},"OR",[132,134,136,138,140,142,144,146],{"Vulnerable":4,"Criteria":49,"MatchCriteriaID":133,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"B152A955-9D6A-4003-9A8A-0221B48D539B",{"Vulnerable":4,"Criteria":52,"MatchCriteriaID":135,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7447CA85-BCB7-4372-BAA2-03CA70ACCD4E",{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":137,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"0C165A44-2A55-4216-83DB-8FFA200077F0",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":139,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"643A1573-29B5-4DD4-94D5-AF64ACCDFF11",{"Vulnerable":4,"Criteria":61,"MatchCriteriaID":141,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"FD833960-F2F6-4F48-BBA6-0FC77D3A1A6B",{"Vulnerable":4,"Criteria":64,"MatchCriteriaID":143,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"CB717827-4F97-4697-A991-4522558BE51F",{"Vulnerable":4,"Criteria":67,"MatchCriteriaID":145,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"61539DE3-591F-4CAA-889B-654037A07DC4",{"Vulnerable":4,"Criteria":70,"MatchCriteriaID":147,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"7C4E4BBD-F14C-4573-B771-FA0303A6220C",[],[],{"lastModified":11,"cacheTime":151,"version":34},1793204112602,{"score":153,"band":154,"action":155,"scoredAt":156},55,"Medium","Plan remediation","2026-07-01T10:20:01.032028+00:00"]