CVE-2016-10273

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2016-10273
Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.

8.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.0 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:S/C:C/I:C/A:C

Exploitability : 8.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf Technical Description Third Party Advisory
https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf Technical Description Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:jensenofscandinavia:air\:link_3g_firmware:2.23m:rev3:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_3g:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:jensenofscandinavia:air\:link_5000ac_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_5000ac:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:jensenofscandinavia:air\:link_59300_firmware:1.04:rev4:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_59300:-:*:*:*:*:*:*:*
History

21 Nov 2024, 02:43

Type Values Removed Values Added
References () https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf - Technical Description, Third Party Advisory () https://www.riskbasedsecurity.com/research/RBS-2016-004.pdf - Technical Description, Third Party Advisory

13 Sep 2021, 11:20

Type Values Removed Values Added
CWE CWE-119 CWE-787
CPE cpe:2.3:h:jensen_of_scandinavia_as:air\:link_59300:-:*:*:*:*:*:*:*
cpe:2.3:o:jensen_of_scandinavia_as:air\:link_59300_firmware:1.04:rev4:*:*:*:*:*:*
cpe:2.3:o:jensen_of_scandinavia_as:air\:link_5000ac_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:h:jensen_of_scandinavia_as:air\:link_5000ac:-:*:*:*:*:*:*:*
cpe:2.3:o:jensen_of_scandinavia_as:air\:link_3g_firmware:2.23m:rev3:*:*:*:*:*:*
cpe:2.3:h:jensen_of_scandinavia_as:air\:link_3g:-:*:*:*:*:*:*:*		 cpe:2.3:o:jensenofscandinavia:air\:link_3g_firmware:2.23m:rev3:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_59300:-:*:*:*:*:*:*:*
cpe:2.3:o:jensenofscandinavia:air\:link_5000ac_firmware:1.13:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_3g:-:*:*:*:*:*:*:*
cpe:2.3:h:jensenofscandinavia:air\:link_5000ac:-:*:*:*:*:*:*:*
cpe:2.3:o:jensenofscandinavia:air\:link_59300_firmware:1.04:rev4:*:*:*:*:*:*
Information

Published : 2017-03-26 05:59

Updated : 2025-04-20 01:37

NVD link : CVE-2016-10273

Mitre link : CVE-2016-10273

CVE.ORG link : CVE-2016-10273

JSON object : View

Products Affected

jensenofscandinavia

  • air\
CWE
CWE-787

Out-of-bounds Write