PT-2016-1473 · Cisco · Cisco Ios

Publicado 2016-02-17 · Atualizado 2016-12-06 · CVE-2016-1333

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5(3)M and 15.6(1)T0a

Description The issue is related to resource management errors in the Cisco IOS operating system. It allows a remote authenticated user to cause a denial of service, resulting in a device reload, by sending an SNMP request for unspecified BRIDGE MIB OIDs.

Recommendations For Cisco IOS version 15.5(3)M, update to a version that fixes the resource management errors to prevent denial of service attacks. For Cisco IOS version 15.6(1)T0a, update to a version that fixes the resource management errors to prevent denial of service attacks. As a temporary workaround, consider restricting access to SNMP requests for BRIDGE MIB OIDs to minimize the risk of exploitation.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

BDU:2016-00774

CVE-2016-1333

Produtos afetados

Cisco Ios

Referências · 5

• https://osv.dev/vulnerability/CVE-2016-1333 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-1333 · Nota de Segurança
• http://securitytracker.com/id/1035035 · Nota
• https://bdu.fstec.ru/vul/2016-00774 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid · Aviso do Fabricante