CVE-2016-1432 — Cisco IOS XE vulnerability

CWE-3994 documents4 sources
Severity
6.5MEDIUMNVD
EPSS
0.5%
top 36.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco IOS XE
Timeline
PublishedJun 18
Latest updateMay 17

Description

Cisco IOS XE 3.15S and 3.16S on cBR-8 Converged Broadband Router devices allows remote authenticated users to cause a denial of service (NULL pointer dereference and card restart) via a crafted SNMP request, aka Bug ID CSCuu68862.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages1 packages

▶NVDcisco/ios_xe3.15.0s, 3.15.1s, 3.16.0s+2

🔴Vulnerability Details

2
GHSA
GHSA-5ccr-6xrm-5728: Cisco IOS XE 3↗2022-05-17
▶
CVEList
CVE-2016-1432: Cisco IOS XE 3↗2016-06-18
▶

📋Vendor Advisories

1
Cisco
Cisco cBR-8 Series Converged Broadband Router SNMP Denial of Service Vulnerability↗2016-06-17
▶
CVE-2016-1432 — Cisco IOS XE vulnerability | cvebase