CVE-2016-1398

Severity: medium (CVSS 6.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-07-03 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service (device reload) via a crafted HTTP request, aka Bug ID CSCux86669.

Affected products

Cisco Rv110W Firmware: 1.1.0.9, 1.2.0.9, 1.2.0.10, 1.2.1.4
Cisco Rv130W Firmware: 1.0.0.21, 1.0.1.3, 1.0.2.7
Cisco Rv215W Firmware: 1.1.0.5, 1.1.0.6, 1.2.0.14, 1.2.0.15, 1.3.0.7

References

http://www.securitytracker.com/id/1036115
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3
http://www.securitytracker.com/id/1036115
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160615-rv3

Get alerted when CVE-2016-1398 or the next vulnerability affects your stack