PT-2016-6846 · Cisco · Cisco Aironet 3800+2

Published 2016-08-22 · Updated 2016-12-12 · CVE-2016-6362

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0 Cisco Aironet 1800, 2800, and 3800 devices with software 8.2.12x before 8.2.121.0 Cisco Aironet 1800, 2800, and 3800 devices with software 8.3.x before 8.3.102.0

Description The issue allows local users to gain privileges via crafted CLI parameters.

Recommendations For Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, update to version 8.2.110.0 or later. For Cisco Aironet 1800, 2800, and 3800 devices with software 8.2.12x before 8.2.121.0, update to version 8.2.121.0 or later. For Cisco Aironet 1800, 2800, and 3800 devices with software 8.3.x before 8.3.102.0, update to version 8.3.102.0 or later.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-6362

Affected Products

Cisco Aironet 1800

Cisco Aironet 2800

Cisco Aironet 3800

References · 5

• https://osv.dev/vulnerability/CVE-2016-6362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6362 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160817-aap1 · Vendor Advisory
• http://securityfocus.com/bid/92513 · Note
• http://securitytracker.com/id/1036644 · Note