CVE-2016-10273

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Multiple stack buffer overflow vulnerabilities in Jensen of Scandinavia AS Air:Link 3G (AL3G) version 2.23m (Rev. 3), Air:Link 5000AC (AL5000AC) version 1.13, and Air:Link 59300 (AL59300) version 1.04 (Rev. 4) devices allow remote attackers to execute arbitrary code or crash the web service via the (1) ateFunc, (2) ateGain, (3) ateTxCount, (4) ateChan, (5) ateRate, (6) ateMacID, (7) e2pTxPower1, (8) e2pTxPower2, (9) e2pTxPower3, (10) e2pTxPower4, (11) e2pTxPower5, (12) e2pTxPower6, (13) e2pTxPower7, (14) e2pTx2Power1, (15) e2pTx2Power2, (16) e2pTx2Power3, (17) e2pTx2Power4, (18) e2pTx2Power5, (19) e2pTx2Power6, (20) e2pTx2Power7, (21) ateTxFreqOffset, (22) ateMode, (23) ateBW, (24) ateAntenna, (25) e2pTxFreqOffset, (26) e2pTxPwDeltaB, (27) e2pTxPwDeltaG, (28) e2pTxPwDeltaMix, (29) e2pTxPwDeltaN, and (30) readE2P parameters of the /goform/formWlanMP endpoint.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 26, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2016

CVE-2016-102747.8An elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local malicious application to execute arbitrary cCVE-2016-102757.8An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withCVE-2016-102767.8An elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious application to execute arbitrary code withCVE-2016-102777.8An elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious application to execute arbitrary code withCVE-2016-10288.8Adobe Flash Player before 18.0.0.343 and 19.x through 21.x before 21.0.0.213 on Windows and OS X and before 11.2.202.616 on Linux allows attCVE-2016-102807.0An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code CVE-2016-102817.0An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code CVE-2016-102827.0An elevation of privilege vulnerability in the MediaTek thermal driver could enable a local malicious application to execute arbitrary code CVE-2016-102837.0An elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local malicious application to execute arbitrary code wiCVE-2016-102847.0An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiCVE-2016-102857.0An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wiCVE-2016-102867.0An elevation of privilege vulnerability in the Qualcomm video driver could enable a local malicious application to execute arbitrary code wi