PT-2017-9995 · Cisco · Cisco Asr 5000

Published 2017-01-26 · Updated 2017-02-11 · CVE-2016-9216

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 Software versions 20.0.0 through 21.0.0

Description An IKE Packet Parsing Denial of Service issue in the ipsecmgr process could allow an unauthenticated, remote attacker to cause the ipsecmgr process to reload.

Recommendations For versions 20.0.0 through 20.1.0, update to version 20.0.0.63250 or later. For versions 20.1.0 through 20.2.0, update to version 20.1.0.63959 or later. For versions 21.0.0, update to version 21.0.0.65256 or later.

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2016-9216

Affected Products

Cisco Asr 5000

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170118-asr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-9216 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-9216 · Security Note
• http://securityfocus.com/bid/95629 · Note
• http://securitytracker.com/id/1037652 · Note