CVE-2016-10273 - CVE House
Back to Database
Status published High CVE-2016-10273

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS...

Vulnerability Description

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-10273

Credits & Attribution

No credits recorded in the NVD database.

References

More from jensenofscandinavia

View All →
CVE-2016-10316
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev....
Medium 6.1
CVE-2016-10315
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev....
Medium 6.1
CVE-2016-10314
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev....
High 8.8
CVE-2016-10313
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev....
High 8.8
CVE-2016-10312
Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev....
Critical 9.8

Affected Vendor

jensenofscandinavia

View all reports →

Affected Software

air\
Vulnerable Versions:
link_3g_firmware, link_5000ac_firmware, link_59300_firmware

Timeline

Official Publish: March 26th, 2017
Last Modified: September 17th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.