CVE-2016-6393

published 2016-10-05

CVE-2016-6393: The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service…

high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C N I N A H

The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
cisco	ios	12.0 – 12.4	—
cisco	ios	15.0 – 15.6	—
cisco	ios_and_ios_xe	—	—
cisco	ios_xe	—	—
cisco	ios_xe	2.1.0 – 3.18.0	—

CWE-399