CVE-2016-9196: High severity cisco access points vulnerability
A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-9196?
CVE-2016-9196 is rated as a high severity vulnerability due to its potential for allowing unauthorized root access.
How do I fix CVE-2016-9196?
To fix CVE-2016-9196, update Cisco Aironet 1800, 2800, or 3800 Series Access Points to the latest version recommended by Cisco.
Who is affected by CVE-2016-9196?
CVE-2016-9196 affects users of Cisco Aironet 1800, 2800, and 3800 Series Access Points running specific vulnerable software versions.
What impact does CVE-2016-9196 have?
The impact of CVE-2016-9196 is that an authenticated local attacker can gain unauthorized unrestricted root access to the Linux operating system.
Is CVE-2016-9196 exploitability possible?
Yes, CVE-2016-9196 is potentially exploitable by authenticated local attackers who can leverage the vulnerability for escalation of privileges.