CVE-2016-9196

MEDIUM

Cisco Aironet - Privilege Escalation

Title source: llm

Description

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).

Scores

CVSS v3 6.7
EPSS 0.0016
EPSS Percentile 37.0%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-264
Status published

Affected Products (8)

cisco/aironet_access_point
cisco/aironet_access_point
cisco/aironet_access_point
cisco/aironet_access_point
cisco/aironet_access_point
cisco/aironet_access_point
cisco/aironet_access_point
n/a/Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms < Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms

Timeline

Published Apr 07, 2017
Tracked Since Feb 18, 2026