PT-2016-6846 · Cisco · Cisco Aironet 3800+2

Publicado 2016-08-22 · Atualizado 2016-12-12 · CVE-2016-6362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0 Cisco Aironet 1800, 2800, and 3800 devices with software 8.2.12x before 8.2.121.0 Cisco Aironet 1800, 2800, and 3800 devices with software 8.3.x before 8.3.102.0

Description The issue allows local users to gain privileges via crafted CLI parameters.

Recommendations For Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, update to version 8.2.110.0 or later. For Cisco Aironet 1800, 2800, and 3800 devices with software 8.2.12x before 8.2.121.0, update to version 8.2.121.0 or later. For Cisco Aironet 1800, 2800, and 3800 devices with software 8.3.x before 8.3.102.0, update to version 8.3.102.0 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2016-6362

Produtos afetados

Cisco Aironet 1800

Cisco Aironet 2800

Cisco Aironet 3800

Referências · 5

• http://securityfocus.com/bid/92513 · Nota
• https://osv.dev/vulnerability/CVE-2016-6362 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-6362 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap1 · Aviso do Fabricante
• http://securitytracker.com/id/1036644 · Nota