The Cisco Application-hosting Framework (CAF) component in Cisco IOS 15.6(1)T1 and IOS XE when the IOx feature set is enabled allows man-in-the-middle attackers to trigger arbitrary downloads via crafted HTTP headers aka Bug ID CSCuz84773.