CVE-2016-1469: Cisco SPA300 Firmware

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

The HTTP framework on Cisco SPA300, SPA500, and SPA51x devices allows remote attackers to cause a denial of service (device outage) via a series of malformed HTTP requests, aka Bug ID CSCut67385.

Affected products

• Cisco SPA300 Firmware: up to and including 7.5.7\(6\)
• Cisco SPA500 Firmware: up to and including 7.5.7\(6\)

Published 2016-09-12. Last modified 2026-06-17.