VDB

CVE-2016-9196

CVE-2016-9196 PUBLISHED CVSS 7.199999809265137 HIGH

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).

EPSS 0.12% · 30.5th percentile

Risk Scores

CVSS 2.0
7.199999809265137
EPSS Score
0.12%
30.5th percentile

Affected Products

VendorProductVersions
ciscoaironet_access_point8.1\(15.14\), 8.1\(112.3\), 8.1\(112.4\)
n/aCisco Aironet 1800, 2800, and 3800 Series Access Point Platforms*

Timeline

  • Apr 5, 2017 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Sep 3, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›