CVE-2016-6362: High severity cisco access point software vulnerability
Published Aug 22, 2016
·Updated
Cisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121.0, and 8.3.x before 8.3.102.0 allow local users to gain privileges via crafted CLI parameters, aka Bug ID CSCuz24725.
Affected Software
7 affected components
cisco Aironet Access Point Software=8.1\(15.14\)
cisco Aironet Access Point Software=8.1\(112.3\)
cisco Aironet Access Point Software=8.1\(112.4\)
cisco Aironet Access Point Software=8.1\(131.0\)
cisco Aironet Access Point Software=8.2\(100.0\)
cisco Aironet Access Point Software=8.2\(102.43\)
cisco Aironet Access Point Software=8.3.0
Event History
Aug 22, 2016
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6362?
CVE-2016-6362 is classified as a high severity vulnerability allowing local users to gain elevated privileges.
2
How do I fix CVE-2016-6362?
To fix CVE-2016-6362, upgrade to Cisco Aironet access point software versions 8.2.110.0, 8.2.121.0, or 8.3.102.0 or later.
3
Which Cisco devices are affected by CVE-2016-6362?
CVE-2016-6362 affects Cisco Aironet 1800, 2800, and 3800 devices with specified software versions.
4
What type of attack does CVE-2016-6362 facilitate?
CVE-2016-6362 facilitates a local privilege escalation attack through crafted CLI parameters.
5
Is remote access required to exploit CVE-2016-6362?
No, CVE-2016-6362 requires local access to the affected Cisco devices for exploitation.