Back to CVE Browser

CVE-2016-1398

MEDIUM

6.5

CVSS Severity Score

EPSS Score0.0670%

EPSS Percentile34.03th

PublishedJul 3, 2016

Last ModifiedMay 6, 2026

Vulnerability Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.

Affected Platforms (CPE)

💻

Cisco

Rv130w Firmware

= 1.0.0.21

💻

Cisco

Rv130w Firmware

= 1.0.1.3

💻

Cisco

Rv130w Firmware

= 1.0.2.7

💻

Cisco

Rv110w Firmware

= 1.1.0.9

💻

Cisco

Rv110w Firmware

= 1.2.0.9

💻

Cisco

Rv110w Firmware

= 1.2.0.10

💻

Cisco

Rv110w Firmware

= 1.2.1.4

💻

Cisco

Rv215w Firmware

= 1.1.0.5

💻

Cisco

Rv215w Firmware

= 1.1.0.6

💻

Cisco

Rv215w Firmware

= 1.2.0.14

💻

Cisco

Rv215w Firmware

= 1.2.0.15

💻

Cisco

Rv215w Firmware

= 1.3.0.7

References & Advisories

🔗 http://www.securitytracker.com/id/1036115

🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3

🔗 http://www.securitytracker.com/id/1036115

🔗 https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3

Related Vulnerabilities

CVE-2016-13959.8

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3...

CVE-2016-13976.5

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with fi...

CVE-2016-13966.1

Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1....

Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in elixir-grpc grpc (GRPC.Compressor.Gzip, GRPC.Mes...