CVE-2016-1396

MEDIUM

Cisco RV110W RV130W RV215W - Stored Cross-Site Scripting via Web Management Interface

Title source: llm
STIX 2.1

Description

Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux82583.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036114

Scores

CVSS v3 6.1
EPSS 0.0101
EPSS Percentile 59.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-79
Status published
Products (12)
cisco/rv110w_wireless-n_vpn_firewall_firmware 1.1.0.9
cisco/rv110w_wireless-n_vpn_firewall_firmware 1.2.0.9
cisco/rv110w_wireless-n_vpn_firewall_firmware 1.2.0.10
cisco/rv110w_wireless-n_vpn_firewall_firmware 1.2.1.4
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware 1.0.0.21
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware 1.0.1.3
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware 1.0.2.7
cisco/rv215w_wireless-n_vpn_router_firmware 1.1.0.5
cisco/rv215w_wireless-n_vpn_router_firmware 1.1.0.6
cisco/rv215w_wireless-n_vpn_router_firmware 1.2.0.14
... and 2 more
Published Jun 19, 2016
Tracked Since Feb 18, 2026