CVE-2016-1397
published 2016-06-19CVE-2016-1397: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and…
PriorityP336medium6.5CVSS 3.0
AVNACLPRLUINSUCNINAH
EPSS
1.78%
75.9th percentile
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | rv110w_rv130w_and_rv215w_routers_http_request | — | — |
| cisco | rv110w_wireless-n_vpn_firewall_firmware | — | — |
| cisco | rv110w_wireless-n_vpn_firewall_firmware | — | — |
| cisco | rv110w_wireless-n_vpn_firewall_firmware | — | — |
| cisco | rv110w_wireless-n_vpn_firewall_firmware | — | — |
| cisco | rv130w_wireless-n_multifunction_vpn_router_firmware | — | — |
| cisco | rv130w_wireless-n_multifunction_vpn_router_firmware | — | — |
| cisco | rv130w_wireless-n_multifunction_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.06.8MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
vendor_cisco6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v2m4-7592-6r6g: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1
ghsa_unreviewed·2022-05-17
CVE-2016-1397 [MEDIUM] CWE-119 GHSA-v2m4-7592-6r6g: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523.
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
vendor_cisco·2016-06-15·CVSS 6.8
CVE-2016-1397 [MEDIUM] CWE-119 Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper sanitization of user-supplied input for fields in HTTP requests that are sent when a user configures an affected device by using the web-based management interface for the device. An attacker could exploit this vulnerability by sending an HTTP request that contains configuration commands with a crafted payload. A successful exploit could allow
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
vendor_cisco
CVE-2016-1397 Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
CVE-2016-1397: Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a denial of service (DoS) condition. The vulnerability is due to improper sanitization of user-supplied input for fields in HTTP requests that are sent when a user configures an affected device by using the web-based management interface for the device. An attacker could exploit this vulnerability by sending an HTTP request that contains configuration commands with a crafted payload. A successful exploi
No detection rules found.
No public exploits indexed.
2016-06-19
Published