PT-2016-6859 · Cisco · Cisco Ios Xe

Publicado 2016-09-28 · Atualizado 2017-07-30 · CVE-2016-6378

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS XE versions 3.1 through 3.17 Cisco IOS XE versions 16.1 through 16.2

Description A vulnerability in the implementation of Network Address Translation (NAT) functionality could allow an unauthenticated, remote attacker to cause an affected device to reload. The issue is due to improper handling of malformed ICMP packets by the affected software. An attacker could exploit this by sending crafted ICMP packets that require NAT processing, resulting in a denial of service (DoS) condition.

Recommendations For Cisco IOS XE versions 3.1 through 3.17, update to a fixed software version. For Cisco IOS XE versions 16.1 through 16.2, update to a fixed software version.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-6378

Produtos afetados

Cisco Ios Xe

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6378 · Nota de Segurança
• http://securityfocus.com/bid/93200 · Nota
• https://osv.dev/vulnerability/CVE-2016-6378 · Aviso do Fabricante
• http://securitytracker.com/id/1036914 · Nota
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160928-esp-nat · Aviso do Fabricante