Lucene search

CiscoCVE-2016-1418

HistoryJun 08, 2016 - 2:59 p.m.

CVE-2016-1418

2016-06-0814:59:14

CWE-20

cisco

web.nvd.nist.gov

cve-2016-1418

cisco

aironet

access point

software

linux

root access

bug id

cscuy64037

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037.

Affected configurations

Nvd

Node

ciscoaironet_1830eMatch-

ciscoaironet_1830iMatch-

ciscoaironet_1850eMatch-

ciscoaironet_1850iMatch-

ciscoaironet_2800Match-

ciscoaironet_3800Match-

AND

ciscoaironet_access_point_software_Match8.2_\(100.0\)

VendorProductVersionCPE
ciscoaironet_1830e-cpe:2.3:h:cisco:aironet_1830e:-:*:*:*:*:*:*:*
ciscoaironet_1830i-cpe:2.3:h:cisco:aironet_1830i:-:*:*:*:*:*:*:*
ciscoaironet_1850e-cpe:2.3:h:cisco:aironet_1850e:-:*:*:*:*:*:*:*
ciscoaironet_1850i-cpe:2.3:h:cisco:aironet_1850i:-:*:*:*:*:*:*:*
ciscoaironet_2800-cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*
ciscoaironet_3800-cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*
ciscoaironet_access_point_software_8.2_(100.0)cpe:2.3:a:cisco:aironet_access_point_software_:8.2_\(100.0\):*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	aironet_1830e	-	cpe:2.3:h:cisco:aironet_1830e:-:::::::*
cisco	aironet_1830i	-	cpe:2.3:h:cisco:aironet_1830i:-:::::::*
cisco	aironet_1850e	-	cpe:2.3:h:cisco:aironet_1850e:-:::::::*
cisco	aironet_1850i	-	cpe:2.3:h:cisco:aironet_1850i:-:::::::*
cisco	aironet_2800	-	cpe:2.3:h:cisco:aironet_2800:-:::::::*
cisco	aironet_3800	-	cpe:2.3:h:cisco:aironet_3800:-:::::::*
cisco	aironet_access_point_software_	8.2_(100.0)	cpe:2.3:a:cisco:aironet_access_point_software_:8.2_\(100.0\):::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160606-aap

www.securitytracker.com/id/1036042

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2016-1418