CVE-2016-1418: Input Validation
First published: Wed Jun 08 2016(Updated: )
Cisco Aironet Access Point Software 8.2(100.0) on 1830e, 1830i, 1850e, 1850i, 2800, and 3800 access points allows local users to obtain Linux root access via crafted CLI command parameters, aka Bug ID CSCuy64037.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Aironet 1830E Firmware | ||
| Cisco Aironet 1830i Access Point | ||
| Cisco Aironet 1850e Access Point | ||
| Cisco Aironet 1850i Access Point | ||
| Cisco Aironet 2800 | ||
| Cisco Aironet 3800p | ||
| Cisco Access Point Software | =8.2_\(100.0\) |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2016-1418?
CVE-2016-1418 is a high-severity vulnerability that allows local users to gain root access on affected Cisco Access Points.
How do I fix CVE-2016-1418?
To fix CVE-2016-1418, upgrade the affected Cisco Access Point Software to a non-vulnerable version.
Which devices are affected by CVE-2016-1418?
CVE-2016-1418 affects Cisco Aironet Access Point software version 8.2(100.0) on specific models including 1830e, 1830i, 1850e, 1850i, 2800, and 3800.
What type of attack does CVE-2016-1418 enable?
CVE-2016-1418 enables local users to execute crafted CLI command parameters to gain unauthorized Linux root access.
Is CVE-2016-1418 being actively exploited?
While there have been no confirmed reports of active exploitation, CVE-2016-1418 presents a risk due to its ability to provide root access.
- agent/references
- agent/type
- agent/severity
- agent/author
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco aironet 1830e firmware
- canonical/cisco aironet 1830i access point
- canonical/cisco aironet 1850e access point
- canonical/cisco aironet 1850i access point
- canonical/cisco aironet 2800
- canonical/cisco aironet 3800p
- canonical/cisco access point software
- version/cisco access point software/8.2_\(100.0\)