CVE-2016-1336
HighSummary
CVE-2016-1336 affects Cisco EPC3928 devices, where remote attackers can cause a device crash by sending a long LanguageSelect parameter. This issue is related to a 'Gateway HTTP Corruption Denial of Service' problem.
Risk Assessment
Attackers can exploit this vulnerability to remotely crash the device, leading to service availability interruptions. This may impact the operational continuity of the organization.
Recommendation
It is recommended to update the firmware of Cisco EPC3928 devices to the latest version to mitigate this vulnerability. Additionally, monitor network traffic for potential attack attempts.
Other vulnerabilities in Cisco EPC3928
See all- CVE-2016-1337High
Cisco EPC3928 devices allow remote attackers to obtain sensitive configuration and credential information by making requests during the early part of the boot process, related to a 'Boot Information Disclosure' issue.
- CVE-2016-1328High
CVE-2016-1328 affects Cisco EPC3928 devices, where remote attackers can cause a device crash by sending an overly long h_sortWireless parameter in a goform/WClientMACList request.
- CVE-2015-6401High
Cisco EPC3928 devices with EDVA versions 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execute unspecified administrative functions via a crafted HTTP request.
Original NVD description (English source)
goform/Docsis_system on Cisco EPC3928 devices allows remote attackers to cause a denial of service (device crash) via a long LanguageSelect parameter, related to a "Gateway HTTP Corruption Denial of Service" issue, aka Bug ID CSCuy28100.