CVE-2016-1321

Description

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco server, aka Bug ID CSCut98082.

Risk Information

Base Score

5.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

EPSS Score

Exploitation Probability

0.082

Associated Vulnerability

Vulnerability	OS Platform
Cisco Universal Small Cell Devices Unauthorized Firmware Retrieval Vulnerability For Cisco Universal Small Cell 3000 Series	NCM
Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1321)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234