CVE:CVE-2016-1302
CNNVD:CNNVD-201602-142
Cisco Application Policy Infrastructure Controllers和Cisco Nexus 9000 Series ACI Mode Switches都是美国思科（Cisco）公司的产品。前者是一款自动化管理以应用为中心的基础设施（ACI）的控制器。后者是一款应用于以应用为中心的基础设施（ACI）的9000系列交换机。
Cisco APIC和Nexus 9000 ACI Mode Switches中存在安全漏洞。远程攻击者可通过发送特制的REST请求利用该漏洞绕过既定的RBAC限制。以下产品及版本受到影响：使用1.0(3h)之前版本和1.1(1j)之前1.1版本软件的Cisco APIC，使用11.0(3h)之前版本和11.1(1j)之前11.1版本软件的Nexus 9000 ACI Mode Switches。
solution:Upgrade samsung x14j_firmware to a higher version than t-ms14jakucb-1102.5,and avoid the version t-ms14jakucb-1102.5; Upgrade sun opensolaris to a higher version than snv_124,and avoid the version snv_124; Upgrade zyxel gs1900-10hp_firmware to a higher version than 2.50\(aazi.0\c0,and avoid the version (,2.50\(aazi.0\)c0); Upgrade zzinc keymouse_firmware to a higher version than 3.08,and avoid the version 3.08; Upgrade cisco nx-os to a higher version than base,and avoid the version base