CVE-2016-1398 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv110w Firmware

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.1%
top 67.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Cisco Rv110w FirmwareCisco Rv130w FirmwareCisco Rv215w Firmware
Timeline
PublishedJul 3
Latest updateMay 17

Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages3 packages

▶NVDcisco/rv110w_firmware4 versions+3
▶NVDcisco/rv130w_firmware1.0.0.21, 1.0.1.3, 1.0.2.7+2
▶NVDcisco/rv215w_firmware5 versions+4

🔴Vulnerability Details

2
GHSA
GHSA-hhf2-ff79-7j23: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1↗2022-05-17
▶
CVEList
CVE-2016-1398: Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1↗2016-07-03
▶

📋Vendor Advisories

1
Cisco
Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability↗2016-06-15
▶
CVE-2016-1398 — Cisco Rv110w Firmware vulnerability | cvebase