{"id":"CVE-2016-1363","aliases":["EUVD-2016-2462","GHSA-49cg-6fc4-5qhm"],"status":"published","title":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software...","description":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05581,"percentile":0.92932,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-399"],"published":"2016-04-21T10:00:00Z","modified":"2026-06-17T00:41:47Z","products":[{"vendor":"cisco","product":"wireless_lan_controller_software"}],"references":[{"url":"http://www.securitytracker.com/id/1035633","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160420-htrd","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1363"},{"url":"https://github.com/advisories/GHSA-49cg-6fc4-5qhm"}],"sources":{"cve":[{"id":"CVE-2016-1363","description":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.","status":"published","published":"2016-04-21T10:00:00Z","modified":"2024-08-05T22:55:14.193Z","updated_at":"2026-11-02T14:33:35.488991Z"}],"euvd":[{"id":"EUVD-2016-2462","description":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.","status":"published","published":"2016-04-21T10:00:00Z","modified":"2024-08-05T22:55:14Z","updated_at":"2026-11-03T02:22:57.428811Z"}],"ghsa":[{"id":"GHSA-49cg-6fc4-5qhm","title":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software...","description":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.","status":"published","published":"2022-05-13T01:10:29Z","modified":"2023-02-01T05:03:31Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T14:50:04.459356Z"}],"nvd":[{"id":"CVE-2016-1363","description":"Buffer overflow in the redirection functionality in Cisco Wireless LAN Controller (WLC) Software 7.2 through 7.4 before 7.4.140.0(MD) and 7.5 through 8.0 before 8.0.115.0(ED) allows remote attackers to execute arbitrary code via a crafted HTTP request, aka Bug ID CSCus25617.","status":"published","published":"2016-04-21T11:00:01.587Z","modified":"2026-06-17T00:41:47.15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-399"],"updated_at":"2026-11-02T14:03:23.795791Z"}]}}