← Back

CVE-2016-9196

nvd nist
Published: Apr 7, 2017Modified: May 13, 2026

JSON object

Loading...
6.7
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).

Affected (7)

1 product
Aironet Access Point
Configuration A
7 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Cisco
Version 8.1(112.3)
Version 8.1(112.4)
Version 8.1(131.0)
Version 8.1(15.14)
Version 8.2(100.0)
Version 8.2(102.43)
Version 8.2_base
Running on/withPlatform Versions
Cisco
Aironet 1800
All versions
Cisco
Aironet 2800e
All versions
Cisco
Aironet 2800i
All versions
Cisco
Aironet 3800e
All versions
Cisco
Aironet 3800i
All versions
Cisco
Aironet 3800p
All versions

Related CWEs

References (6)

Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.