Denial of Service Vulnerability in IPsec Component of Cisco ASR 5000 Series Routers
CVE-2016-6466

7.5HIGH

Key Information:

Vendor

Cisco
Status
Cisco Staros 20.0.0 Through 21.0.m0.64246
Vendor
CVE Published:
19 November 2016

What is CVE-2016-6466?

A vulnerability in the IPsec component of Cisco ASR 5000 Series routers enables an unauthenticated remote attacker to disrupt existing IPsec VPN tunnels and hinder the creation of new tunnels, leading to a denial of service condition. This affects various versions and requires immediate attention to prevent potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Cisco StarOS 20.0.0 through 21.0.M0.64246 Cisco StarOS 20.0.0 through 21.0.M0.64246

References

https://tools.cisco.com/security/center/content/CiscoSecu...
x_refsource_CONFIRM
http://www.securitytracker.com/id/1037308
vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/94361
vdb-entryx_refsource_BID

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.