CVE-2016-1395

Critical

Published: 19/06/2016(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The web-based management interface on Cisco RV110W, RV130W, and RV215W devices with outdated firmware allows remote attackers to execute arbitrary code as root via a crafted HTTP request.

Risk Assessment

Exploitation of this vulnerability could lead to complete compromise of the device, posing a serious threat to the organization's network security.

Recommendation

It is recommended to update the device firmware to the latest versions to mitigate this vulnerability.

Original NVD description (English source)

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428.