CVE-2016-1363

—

CVSS 3.1

9.8 critical

EPSS

6%p92

Published

Apr 21, 2016 (Apr 21, 2016)

Modified

Jun 17, 2026

Description

Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.

Vendors: cisco
Products: wireless lan controller software
Weakness: CWE-399
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (5.6%)

In the news1 stories

Cisco Wireless LAN Controller affected by severe flaws. Patch it.

Security AffairsApr 21, 14:13 UTC · Apr 21, 2016Vulnerability CVE-2016-1363 CVE-2016-1364 CVE-2016-1362