CVE-2016-1398

MEDIUM

Cisco RV110W RV130W RV215W - Authenticated Denial of Service via Crafted HTTP Request

Title source: llm
STIX 2.1

Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1036115

Scores

CVSS v3 6.5
EPSS 0.0165
EPSS Percentile 73.7%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-119
Status published
Products (12)
cisco/rv110w_firmware 1.1.0.9
cisco/rv110w_firmware 1.2.0.9
cisco/rv110w_firmware 1.2.0.10
cisco/rv110w_firmware 1.2.1.4
cisco/rv130w_firmware 1.0.0.21
cisco/rv130w_firmware 1.0.1.3
cisco/rv130w_firmware 1.0.2.7
cisco/rv215w_firmware 1.1.0.5
cisco/rv215w_firmware 1.1.0.6
cisco/rv215w_firmware 1.2.0.14
... and 2 more
Published Jul 03, 2016
Tracked Since Feb 18, 2026