Denial of Service Vulnerability in IPsec Component of Cisco ASR 5000 Series Routers
CVE-2016-6466

7.5HIGH

Key Information:

Vendor

Cisco
Status
Cisco Staros 20.0.0 Through 21.0.m0.64246
Vendor
CVE Published:
19 November 2016

What is CVE-2016-6466?

A vulnerability in the IPsec component of Cisco ASR 5000 Series routers enables an unauthenticated remote attacker to disrupt existing IPsec VPN tunnels and hinder the creation of new tunnels, leading to a denial of service condition. This affects various versions and requires immediate attention to prevent potential exploitation.

Affected Version(s)

Cisco StarOS 20.0.0 through 21.0.M0.64246 Cisco StarOS 20.0.0 through 21.0.M0.64246

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037308
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/94361
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.