CVE-2016-9197 Privilege escalation in Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers
An authenticated local attacker can exploit a CLI parser flaw to gain root-level shell access on Cisco Mobility Express Wireless LAN Controllers.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2016-9197?
CVE-2016-9197 is a medium-severity vulnerability in Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers, published on 7 Apr 2017. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the CLI command parser of the Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers could allow an authenticated, local attacker to obtain access to the underlying operating system shell with root-level privileges. More Information: CSCvb70351. Known Affected Releases: 8.3(102.0).
Weakness: CWE-264
Which versions are affected by CVE-2016-9197?
It affects 1 product.
Products include Cisco Mobility Services Engine.
How do I fix CVE-2016-9197?
No fix has been published for CVE-2016-9197 yet. Limit exposure of the affected software until one is available.
Is CVE-2016-9197 being exploited?
There is no known exploitation of CVE-2016-9197 in the wild and no public exploit code.
Other vulnerabilities in Cisco Mobility Express 2800 and 3800 Series Wireless LAN Controllers
- CVE-2018-0374 Missing authorization in Cisco Policy Suite unknown
- CVE-2018-0375 Hardcoded credentials in Cisco Policy Suite unknown
- CVE-2018-0376 Missing authorization in Cisco Policy Suite unknown
- CVE-2018-0377 Missing authorization in Cisco Policy Suite unknown
- CVE-2018-0116 Auth bypass in Cisco Policy Suite
Sources
Also known as GHSA-w5pr-xh48-9w34.