Skip to content
CVE Tracker
Back

CVE-2016-9196

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an…

Medium6.7EPSS 0.42%
Published
Updated
Reserved
Assigned by
cisco

Description

A vulnerability in login authentication management in Cisco Aironet 1800, 2800, and 3800 Series Access Point platforms could allow an authenticated, local attacker to gain unrestricted root access to the underlying Linux operating system. The root Linux shell is provided for advanced troubleshooting and should not be available to individual users, even those with root privileges. The attacker must have the root password to exploit this vulnerability. More Information: CSCvb13893. Known Affected Releases: 8.2(121.0) 8.3(102.0). Known Fixed Releases: 8.4(1.53) 8.4(1.52) 8.3(111.0) 8.3(104.23) 8.2(130.0) 8.2(124.1).

Scores

CVSS scores of CVE-2016-9196, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.0Medium6.7CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
0.42% · top 64% of all CVEs (2 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.7.

Weakness

Affected products

  • Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms

    • affected Cisco Aironet 1800, 2800, and 3800 Series Access Point Platforms

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .