CVE-2016-1397

MEDIUM

Cisco - Buffer Overflow

Title source: llm

Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service (device reload) via crafted configuration commands in an HTTP request, aka Bug ID CSCux82523.

Scores

CVSS v3 6.5
EPSS 0.0051
EPSS Percentile 66.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-119
Status draft

Affected Products (12)

cisco/rv215w_wireless-n_vpn_router_firmware
cisco/rv215w_wireless-n_vpn_router_firmware
cisco/rv215w_wireless-n_vpn_router_firmware
cisco/rv215w_wireless-n_vpn_router_firmware
cisco/rv215w_wireless-n_vpn_router_firmware
cisco/rv110w_wireless-n_vpn_firewall_firmware
cisco/rv110w_wireless-n_vpn_firewall_firmware
cisco/rv110w_wireless-n_vpn_firewall_firmware
cisco/rv110w_wireless-n_vpn_firewall_firmware
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware
cisco/rv130w_wireless-n_multifunction_vpn_router_firmware

Timeline

Published Jun 19, 2016
Tracked Since Feb 18, 2026