cbcvebase.
CVE-2016-1397
published 2016-06-19

CVE-2016-1397: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and…

medium6.5CVSS 3.0
AVNACLPRLUINSUCNINAH
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523.

Affected

13 ranges
VendorProductVersion rangeFixed in
ciscorv110w_rv130w_and_rv215w_routers_http_request
ciscorv110w_wireless-n_vpn_firewall_firmware
ciscorv110w_wireless-n_vpn_firewall_firmware
ciscorv110w_wireless-n_vpn_firewall_firmware
ciscorv110w_wireless-n_vpn_firewall_firmware
ciscorv130w_wireless-n_multifunction_vpn_router_firmware
ciscorv130w_wireless-n_multifunction_vpn_router_firmware
ciscorv130w_wireless-n_multifunction_vpn_router_firmware
ciscorv215w_wireless-n_vpn_router_firmware
ciscorv215w_wireless-n_vpn_router_firmware
ciscorv215w_wireless-n_vpn_router_firmware
ciscorv215w_wireless-n_vpn_router_firmware
ciscorv215w_wireless-n_vpn_router_firmware