CVE-2016-1363
Published Apr 21, 2016
Last updated 4 years ago
Overview
- Description
- Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.
- Source
- ykramarz@cisco.com
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 3.1
- Type
- Primary
- Base score
- 9.8
- Impact score
- 5.9
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Severity
- CRITICAL
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-399
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1D8B34C-390B-4E09-8B30-6FA2CB72A83F",
"versionEndExcluding": "7.4.140.0",
"versionStartIncluding": "7.2.0"
},
{
"criteria": "cpe:2.3:o:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C1FF28AF-4FED-4959-9F6A-724CDAE0381A",
"versionEndExcluding": "8.0.115.0",
"versionStartIncluding": "7.5.0"
}
],
"operator": "OR"
}
]
}
]