CVE-2016-1398
published 2016-07-03CVE-2016-1398: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and…
PriorityP434medium6.5CVSS 3.0
AVNACLPRLUINSUCNINAH
EPSS
1.65%
73.8th percentile
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.
Affected
13 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | rv110w_firmware | — | — |
| cisco | rv110w_firmware | — | — |
| cisco | rv110w_firmware | — | — |
| cisco | rv110w_firmware | — | — |
| cisco | rv110w_rv130w_and_rv215w_routers_http_request | — | — |
| cisco | rv130w_firmware | — | — |
| cisco | rv130w_firmware | — | — |
| cisco | rv130w_firmware | — | — |
| cisco | rv215w_firmware | — | — |
| cisco | rv215w_firmware | — | — |
| cisco | rv215w_firmware | — | — |
| cisco | rv215w_firmware | — | — |
| cisco | rv215w_firmware | — | — |
CVSS provenance
nvdv3.06.5MEDIUMCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvdv2.06.8MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
vendor_cisco6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-hhf2-ff79-7j23: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1
ghsa_unreviewed·2022-05-17
CVE-2016-1398 [MEDIUM] CWE-119 GHSA-hhf2-ff79-7j23: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1
Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
vendor_cisco·2016-06-15·CVSS 6.8
CVE-2016-1398 [MEDIUM] CWE-119 Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a denial of service (DoS) condition.
The vulnerability is due to improper sanitization of user-supplied input for fields in HTTP requests that are sent when a user configures an affected device by using the web-based management interface for the device. An attacker could exploit this vulnerability by sending an HTTP request that contains configuration commands with a crafted payload. A successful exploit could allow
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
vendor_cisco
CVE-2016-1398 Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
CVE-2016-1398: Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a denial of service (DoS) condition. The vulnerability is due to improper sanitization of user-supplied input for fields in HTTP requests that are sent when a user configures an affected device by using the web-based management interface for the device. An attacker could exploit this vulnerability by sending an HTTP request that contains configuration commands with a crafted payload. A successful exploi
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2016-07-03
Published