CVE-2016-1469

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@cisco.com

Published

2016-09-12

Last modified

2024-08-05

Weaknesses

CWE-399

Affected products

• Spa300 Firmware (Cisco)
• Spa500 Firmware (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160831-spa
• http://www.securityfocus.com/bid/92706
• http://www.securitytracker.com/id/1036717