Home

CVE-2016-1472

Description

The web-based management interface on Cisco Small Business 220 devices with firmware before 1.0.1.1 allows remote attackers to cause a denial of service (interface outage) via a crafted HTTP request, aka Bug ID CSCuz76238.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
1.159

Associated Vulnerability

VulnerabilityOS Platform
Cisco Small Business 220 Series Smart Plus Switches Web Interface Denial of Service Vulnerability For Cisco LAN Switch SoftwareNCM
Improper Input Validation Vulnerability (CVE-2016-1472)NCM

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-1705934Security Update for Cisco LAN Switch Software 1.0.1.1

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234