PT-2017-9995 · Cisco · Cisco Asr 5000

Publicado 2017-01-26 · Atualizado 2017-02-11 · CVE-2016-9216

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Software versions 20.0.0 through 21.0.0

Description An IKE Packet Parsing Denial of Service issue in the ipsecmgr process could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload.

Recommendations For versions 20.0.0 through 20.1.0, update to version 20.0.0.63250 or later. For versions 20.1.0 through 20.2.0, update to version 20.1.0.63959 or later. For versions 21.0.0, update to version 21.0.0.65256 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2016-9216

Produtos afetados

Cisco Asr 5000

Referências · 5

• http://securityfocus.com/bid/95629 · Nota
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-asr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-9216 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2016-9216 · Nota de Segurança
• http://securitytracker.com/id/1037652 · Nota