// For flags

CVE-2016-1469

 

Severity Score

7.5
*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.

El marco de referencia HTTP en dispositivos Cisco SPA300, SPA500 y SPA51x permite a atacantes remotos provocar una denegación de servicio (interrupción del dispositivo) a través de una serie de peticiones HTTP mal formadas, vulnerabilidad también conocida como Bug ID CSCut67385.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2016-01-04 CVE Reserved
  • 2016-09-12 CVE Published
  • 2023-06-28 EPSS Updated
  • 2024-08-05 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Spa300 Firmware
Search vendor "Cisco" for product "Spa300 Firmware"
<= 7.5.7\(6\)
Search vendor "Cisco" for product "Spa300 Firmware" and version " <= 7.5.7\(6\)"
-
Affected
in Cisco
Search vendor "Cisco"
Spa300 Series Ip Phone
Search vendor "Cisco" for product "Spa300 Series Ip Phone"
--
Safe
Cisco
Search vendor "Cisco"
Spa300 Firmware
Search vendor "Cisco" for product "Spa300 Firmware"
<= 7.5.7\(6\)
Search vendor "Cisco" for product "Spa300 Firmware" and version " <= 7.5.7\(6\)"
-
Affected
in Cisco
Search vendor "Cisco"
Spa500 Series Ip Phone
Search vendor "Cisco" for product "Spa500 Series Ip Phone"
--
Safe
Cisco
Search vendor "Cisco"
Spa500 Firmware
Search vendor "Cisco" for product "Spa500 Firmware"
<= 7.5.7\(6\)
Search vendor "Cisco" for product "Spa500 Firmware" and version " <= 7.5.7\(6\)"
-
Affected
in Cisco
Search vendor "Cisco"
Spa300 Series Ip Phone
Search vendor "Cisco" for product "Spa300 Series Ip Phone"
--
Safe
Cisco
Search vendor "Cisco"
Spa500 Firmware
Search vendor "Cisco" for product "Spa500 Firmware"
<= 7.5.7\(6\)
Search vendor "Cisco" for product "Spa500 Firmware" and version " <= 7.5.7\(6\)"
-
Affected
in Cisco
Search vendor "Cisco"
Spa500 Series Ip Phone
Search vendor "Cisco" for product "Spa500 Series Ip Phone"
--
Safe