What is CVE-2016-1429?

CVE-2016-1429 is a high-severity vulnerability in Cisco Rv180_vpn_router, classified under Path Traversal. CVSS score: 7.5/10. Published 2016-08-08.

How severe is CVE-2016-1429?

High severity. CVSS v3 base score is 7.5 out of 10.

Path Traversal in Cisco Rv180_vpn_router

CVE-2016-1429

Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuz43023.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (65.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

CWE-22 — Path Traversal

References

20160803 Cisco RV180 VPN and RV180W Wireless-N Multifunction VPN Routers Unauthorized Access Vulnerability (x_refsource_CISCO, vendor-advisory, Mitigation, Vendor Advisory)
92270 (vdb-entry, x_refsource_BID)
1036527 (vdb-entry, x_refsource_SECTRACK)

Frequently asked questions

What is CVE-2016-1429?: CVE-2016-1429 is a high-severity vulnerability in Cisco Rv180_vpn_router, classified under Path Traversal. CVSS score: 7.5/10. Published 2016-08-08.
How severe is CVE-2016-1429?: High severity. CVSS v3 base score is 7.5 out of 10.