Remote Denial of Service Vulnerability in Cisco IOS and IOS XE
CVE-2016-1348

7.5HIGH

Key Information:

Vendor

Cisco
Status
Ios Xe
X14j Firmware
Opensolaris
Gs1900-10HP Firmware
Vendor
CVE Published:
26 March 2016

What is CVE-2016-1348?

Cisco IOS and IOS XE versions 15.0 through 15.5 and 3.3 through 3.16 are impacted by a vulnerability that allows remote attackers to trigger a denial of service condition. This attack is executed through specially crafted DHCPv6 Relay messages, which can lead to unexpected device reloads. Proper security measures should be implemented to mitigate potential exploitation of this flaw.

References

http://tools.cisco.com/security/center/content/CiscoSecur...
vendor-advisoryx_refsource_CISCO
http://www.securitytracker.com/id/1035381
vdb-entryx_refsource_SECTRACK

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.