CVE-2016-9204: A vulnerability in the Cisco Intercloud Fabric (ICF) Director could allow an unauthenticated, remote attack...

Security readout for executives and security teams

Cisco ICF Director had a flaw that could let an unauthenticated remote attacker connect to internal services using an internal account. That creates business risk where Cisco Nexus 1000V InterCloud or ICF Director remains deployed, especially if reachable from untrusted networks. Likely limited to organizations that deployed Cisco Intercloud Fabric Director or Cisco Nexus 1000V InterCloud, particularly known affected release 2.2(1). Internet or broad network reachability would increase risk, but exposure cannot be confirmed from the bundle alone. Prioritize this as high where the product is still deployed or reachable. The vulnerable technology is older, so many organizations may have no exposure, but remaining instances could create a direct path to internal services. Mitigation focus: Check Cisco advisory cisco-sa-20161207-icf and CSCus99379 for vendor remediation guidance.; Inventory ICF Director and Nexus 1000V InterCloud deployments, especially release 2.2(1).; Restrict access to ICF Director management and service interfaces to trusted networks..

Prepared

Jun 13, 2026, 13:16 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.