PT-2016-6939 · Cisco · Staros

Publicado 2016-12-14 · Atualizado 2017-01-05 · CVE-2016-6467

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch versions 20.0.0 through 21.0.M0.64702

Description A vulnerability in IPv6 packet fragment reassembly could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process.

Recommendations For version 20.0.0, update to version 21.0.0.65256 or later. For version 21.0.0, update to version 21.0.0.65256 or later. For version 21.0.M0.64702, update to version 21.0.M0.64970 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-6467

Produtos afetados

Staros

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-6467 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2016-6467 · Aviso do Fabricante
• http://securitytracker.com/id/1037416 · Nota
• http://securityfocus.com/bid/94772 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-asr · Aviso do Fabricante