CVE-2016-1397 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv110w Wireless-n VPN Firewall Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer5 documents5 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 33.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Rv110w Wireless-n VPN Firewall FirmwareCisco Rv130w Wireless-n Multifunction VPN Router FirmwareCisco Rv215w Wireless-n VPN Router Firmware
Timeline
PublishedJun 19
Latest updateMay 17

Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

🔴Vulnerability Details

2
GHSA
GHSA-v2m4-7592-6r6g: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1↗2022-05-17
▶
CVEList
CVE-2016-1397: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1↗2016-06-19
▶

📋Vendor Advisories

1
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability↗2016-06-15
▶

💬Community

1
Bugzilla
CVE-2015-8842 systemd: improper use of tmpfiles.d to create persistent journal files↗2016-06-21
▶
CVE-2016-1397 — Cisco vulnerability | cvebase