What is CVE-2016-10273?

CVE-2016-10273 is a high-severity vulnerability in Jensenofscandinavia Air\, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2017-03-26.

How severe is CVE-2016-10273?

High severity. CVSS v3 base score is 8.8 out of 10.

Buffer overflow in Jensenofscandinavia Air\

CVE-2016-10273

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.

Vulnerability class: Buffer Overflow

EPSS: 0.029 (85.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Jensenofscandinavia Air\ — versions link_3g_firmware, link_3g, link_5000ac_firmware
N/a — versions n/a

Weakness classification (CWE)

CWE-787 — Out-of-bounds Write

References

cve@mitre.org (Technical Description, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2016-10273?: CVE-2016-10273 is a high-severity vulnerability in Jensenofscandinavia Air\, classified under Out-of-bounds Write. CVSS score: 8.8/10. Published 2017-03-26.
How severe is CVE-2016-10273?: High severity. CVSS v3 base score is 8.8 out of 10.