Lucene search

CiscoCVE-2016-1428

HistoryJun 23, 2016 - 12:59 a.m.

CVE-2016-1428

2016-06-2300:59:02

CWE-399

cisco

web.nvd.nist.gov

cve-2016-1428

cisco ios xe

remote authentication

denial of service

snmp

bug id cscux13174

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174.

Affected configurations

Nvd

Node

ciscoios_xeMatch3.15.0s

ciscoios_xeMatch3.16.0s

ciscoios_xeMatch3.17.0s

VendorProductVersionCPE
ciscoios_xe3.15.0scpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*
ciscoios_xe3.16.0scpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*
ciscoios_xe3.17.0scpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios_xe	3.15.0s	cpe:2.3:o:cisco:ios_xe:3.15.0s:::::::*
cisco	ios_xe	3.16.0s	cpe:2.3:o:cisco:ios_xe:3.16.0s:::::::*
cisco	ios_xe	3.17.0s	cpe:2.3:o:cisco:ios_xe:3.17.0s:::::::*

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160620-iosxe

www.securitytracker.com/id/1036140

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

43.8%

JSON

Related for CVE-2016-1428