CVEvulnerability
CVE-2016-1363
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2016-04-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-399
Description
Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.
Affected configurations
• cisco wireless lan controller software (>= 7.2.0 < 7.4.140.0)
• cisco wireless lan controller software (>= 7.5.0 < 8.0.115.0)
Related
Weakness · not in database (1)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd Vendor Advisory
- http://www.securitytracker.com/id/1035633 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd Vendor Advisory
- http://www.securitytracker.com/id/1035633 Third Party Advisory, VDB Entry