CVE-2016-1363

published 2016-04-21

CVE-2016-1363: Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0…

critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
cisco	wireless_lan_controller_http_parsing	—	—
cisco	wireless_lan_controller_software	>= 7.2.0 < 7.4.140.0	7.4.140.0
cisco	wireless_lan_controller_software	>= 7.5.0 < 8.0.115.0	8.0.115.0

CWE-399