PT-2016-1473 · Cisco · Cisco Ios

Published 2016-02-17 · Updated 2016-12-06 · CVE-2016-1333

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.5(3)M and 15.6(1)T0a

Description The issue is related to resource management errors in the Cisco IOS operating system. It allows a remote authenticated user to cause a denial of service, resulting in a device reload, by sending an SNMP request for unspecified BRIDGE MIB OIDs.

Recommendations For Cisco IOS version 15.5(3)M, update to a version that fixes the resource management errors to prevent denial of service attacks. For Cisco IOS version 15.6(1)T0a, update to a version that fixes the resource management errors to prevent denial of service attacks. As a temporary workaround, consider restricting access to SNMP requests for BRIDGE MIB OIDs to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2016-00774

CVE-2016-1333

Affected Products

Cisco Ios

References · 5

• https://osv.dev/vulnerability/CVE-2016-1333 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-1333 · Security Note
• https://bdu.fstec.ru/vul/2016-00774 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160216-grid · Vendor Advisory
• http://securitytracker.com/id/1035035 · Note