CVE-2016-6362

HIGH

Cisco Aironet <8.2.110.0-8.3.102.0 - Privilege Escalation

Title source: llm

Description

Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1036644

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/92513

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap1

Scores

CVSS v3 7.8

EPSS 0.0040

EPSS Percentile 32.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-264

Status published

Products (7)

cisco/aironet_access_point_software 8.1\(15.14\)

cisco/aironet_access_point_software 8.1\(112.3\)

cisco/aironet_access_point_software 8.1\(112.4\)

cisco/aironet_access_point_software 8.1\(131.0\)

cisco/aironet_access_point_software 8.2\(100.0\)

cisco/aironet_access_point_software 8.2\(102.43\)

cisco/aironet_access_point_software 8.3.0

Published Aug 22, 2016

Tracked Since Feb 18, 2026