TI-2016-01213 Aliases CVE-2016-1321 GHSA-8v3j-hp54-rp54

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an…

LOW 28CWE-200Published 2016-02-15 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · None · None
Fix status: No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote attackers to bypass a certain certificate-validation feature and obtain sensitive firmware-image and IP address data via a request to an unspecified Cisco server, aka Bug ID CSCut98082.

Why it matters now

EPSS 0.00916 60th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 13

CPE	Versions	Role	Vendor
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.12_base:::::::*	r2.12_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.13_base:::::::*	r2.13_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.14_base:::::::*	r2.14_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.15_base:::::::*	r2.15_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.16_base:::::::*	r2.16_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.17_base:::::::*	r2.17_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.2_base:::::::*	r3.2_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.3_base:::::::*	r3.3_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_1.1:::::::*	r3.4_1.1	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.1:::::::*	r3.4_2.1	Vulnerable	Cisco

cpe:2.3:o:cisco:universal_small_cell_firmware:r2.12_base:*:*:*:*:*:*:* Versions r2.12_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.13_base:*:*:*:*:*:*:* Versions r2.13_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.14_base:*:*:*:*:*:*:* Versions r2.14_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.15_base:*:*:*:*:*:*:* Versions r2.15_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.16_base:*:*:*:*:*:*:* Versions r2.16_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r2.17_base:*:*:*:*:*:*:* Versions r2.17_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.2_base:*:*:*:*:*:*:* Versions r3.2_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.3_base:*:*:*:*:*:*:* Versions r3.3_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_1.1:*:*:*:*:*:*:* Versions r3.4_1.1 Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.1:*:*:*:*:*:*:* Versions r3.4_2.1 Vulnerable ·Cisco

Show 3 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.17:::::::*	r3.4_2.17	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_base:::::::*	r3.4_base	Vulnerable	Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.5_base:::::::*	r3.5_base	Vulnerable	Cisco

cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_2.17:*:*:*:*:*:*:* Versions r3.4_2.17 Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.4_base:*:*:*:*:*:*:* Versions r3.4_base Vulnerable ·Cisco
cpe:2.3:o:cisco:universal_small_cell_firmware:r3.5_base:*:*:*:*:*:*:* Versions r3.5_base Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2016-1321
2026-10-03 Alias added: GHSA-8v3j-hp54-rp54

References

Advisory 1

20160212 Cisco Universal Small Cell Devices Unauthorized Firmware Retrieval Vulnerability

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences