CVE-2016-1472

High

Published: 02/09/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 is vulnerable to remote attacks that can lead to denial of service via a crafted HTTP request.

Risk Assessment

Attackers can remotely cause an interface outage, potentially disrupting service availability for users.

Recommendation

It is recommended to update the firmware to version 1.0.1.1 or later to mitigate this vulnerability.

Other vulnerabilities in Cisco Small Business 220 devices

CVE-2016-1473Critical
Cisco Small Business 220 devices with firmware before 1.0.1.1 have a hardcoded SNMP community, allowing remote attackers to read or modify SNMP objects by leveraging knowledge of this community.

Original NVD description (English source)

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.