Lucene search

[email protected]CVE-2016-1398

HistoryJul 03, 2016 - 9:59 p.m.

CVE-2016-1398

2016-07-0321:59:07

CWE-119

[email protected]

web.nvd.nist.gov

cisco

rv110w

rv130w

rv215w

buffer overflow

remote authenticated users

denial of service

crafted http request

cve-2016-1398

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

41.3%

JSON

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.

Affected configurations

NVD

Node

ciscorv130w_firmwareMatch1.0.0.21

ciscorv130w_firmwareMatch1.0.1.3

ciscorv130w_firmwareMatch1.0.2.7

AND

ciscorv130wMatch-

Node

ciscorv110w_firmwareMatch1.1.0.9

ciscorv110w_firmwareMatch1.2.0.9

ciscorv110w_firmwareMatch1.2.0.10

ciscorv110w_firmwareMatch1.2.1.4

AND

ciscorv110wMatch-

Node

ciscorv215w_firmwareMatch1.1.0.5

ciscorv215w_firmwareMatch1.1.0.6

ciscorv215w_firmwareMatch1.2.0.14

ciscorv215w_firmwareMatch1.2.0.15

ciscorv215w_firmwareMatch1.3.0.7

AND

ciscorv215wMatch-

CPENameOperatorVersion
cisco:rv130w_firmwarecisco rv130w firmwareeq1.0.0.21
cisco:rv130w_firmwarecisco rv130w firmwareeq1.0.1.3
cisco:rv130w_firmwarecisco rv130w firmwareeq1.0.2.7

CPE	Name	Operator	Version
cisco:rv130w_firmware	cisco rv130w firmware	eq	1.0.0.21
cisco:rv130w_firmware	cisco rv130w firmware	eq	1.0.1.3
cisco:rv130w_firmware	cisco rv130w firmware	eq	1.0.2.7

References

www.securitytracker.com/id/1036115

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.2 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.001 Low

EPSS

Percentile

41.3%

JSON

Related for CVE-2016-1398

cvelist1 prion1 openvas1 cisco1 nvd1