PT-2016-4763 · Cisco · Cisco Ios

Published 2016-05-14 · Updated 2021-10-06 · CVE-2016-1399

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.2(2)EA through 15.2(2)EA2 Cisco IOS version 15.2(4)EA Cisco IOS versions 15.2(2)EB through 15.2(2)EB1

Description The issue allows remote attackers to cause a denial of service, resulting in packet data corruption, via crafted IPv4 ICMP packets.

Recommendations For Cisco IOS versions 15.2(2)EA through 15.2(2)EA2, update to a fixed version to resolve the issue. For Cisco IOS version 15.2(4)EA, update to a fixed version to resolve the issue. For Cisco IOS versions 15.2(2)EB through 15.2(2)EB1, update to a fixed version to resolve the issue.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-1399

Affected Products

Cisco Ios

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2016-1399 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160513-ies · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1399 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-16-175-01 · Note
• http://securitytracker.com/id/1035898 · Note
• http://securityfocus.com/bid/90665 · Note