CVE-2016-1328
HighSummary
CVE-2016-1328 affects Cisco EPC3928 devices, where remote attackers can cause a device crash by sending an overly long h_sortWireless parameter in a goform/WClientMACList request.
Risk Assessment
Attackers can exploit this vulnerability to remotely crash the device, leading to service availability interruptions.
Recommendation
It is recommended to update the device firmware to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.
Other vulnerabilities in Cisco EPC3928
See all- CVE-2016-1337High
Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a 'Boot Information Disclosure' issue.
- CVE-2016-1336High
CVE-2016-1336 affects Cisco EPC3928 devices, where remote attackers can cause a device crash by sending a long LanguageSelect parameter. This issue is related to a 'Gateway HTTP Corruption Denial of Service' problem.
- CVE-2015-6401High
Cisco EPC3928 devices with EDVA versions 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request.
Original NVD description (English source)
goform/WClientMACList on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long h_sortWireless parameter, related to a "Gateway Client List Denial of Service" issue, aka Bug ID CSCux24948.