CVE:CVE-2016-1420
CNNVD:CNNVD-201606-223
Cisco Application Policy Infrastructure Controller（APIC）是美国思科（Cisco）公司的一款自动化管理以应用为中心的基础设施（ACI）的控制器。
使用1.3(2f)之前版本软件的Cisco APIC中的安装组件存在安全漏洞，该漏洞源于程序没有正确处理二进制文件。本地攻击者可利用该漏洞获取root权限。
solution:Upgrade cisco application_infrastructure_controller to a higher version than -; Upgrade cisco application_policy_infrastructure_controller_firmware to a higher version than 1.0(1e,1.0(1h,1.0(1k,1.0(1n,1.0(2j,1.0(2m,1.0(3f,1.0(3i,1.0(3k,1.0(3n,1.0(4h,1.0(4o,1.1(0.920a,1.1(1j,1.1(3f,and avoid the version 1.0(1e),1.0(1h),1.0(1k),1.0(1n),1.0(2j),1.0(2m),1.0(3f),1.0(3i),1.0(3k),1.0(3n),1.0(4h),1.0(4o),1.1(0.920a),1.1(1j),1.1(3f)