PT-2016-6912 · Cisco · Cbr-8 Converged Broadband Routers+1

Published 2016-10-12 · Updated 2017-07-29 · CVE-2016-6438

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 15.5(3)S2.9 through 15.6(2)SP Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers versions 3.16S through 3.18.1S

Description A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. The vulnerability is due to a logic processing error that exists if an affected device is configured with the Downstream Resiliency and Downstream Resiliency Bonding Group features. An attacker could exploit this vulnerability by continuously trying to establish Telnet or SSH connections to a targeted device. A successful exploit could allow the attacker to trigger an integrity issue with the vty line configuration.

Recommendations For versions 15.5(3)S2.9 through 15.6(2)SP, update to version 15.6(1.7)SP1 or later. For versions 3.16S through 3.18.1S, update to version 16.4(0.183) or later, or version 16.5(0.1) or later. As a temporary workaround, consider restricting access to Telnet and SSH connections to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-6438

Affected Products

Cisco Ios Xe

Cbr-8 Converged Broadband Routers

References · 5

• https://osv.dev/vulnerability/CVE-2016-6438 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6438 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-cbr-8 · Vendor Advisory
• http://securityfocus.com/bid/93518 · Note
• http://securitytracker.com/id/1037003 · Note