CVE-2016-1396: XSS
Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a crafted parameter, aka Bug ID CSCux82583.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1396?
CVE-2016-1396 is classified as a high severity vulnerability due to its cross-site scripting nature.
How do I fix CVE-2016-1396?
To mitigate CVE-2016-1396, update the firmware of affected Cisco RV110W, RV130W, and RV215W devices to the latest version.
Which devices are affected by CVE-2016-1396?
CVE-2016-1396 affects Cisco RV110W, RV130W, and RV215W devices running specific firmware versions prior to the patched releases.
What type of vulnerability is CVE-2016-1396?
CVE-2016-1396 is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject malicious scripts.
Can I check if my Cisco device is vulnerable to CVE-2016-1396?
Yes, you can check if your Cisco device is vulnerable by verifying the firmware version against the specific versions listed in the CVE description.