CVEvulnerability
CVE-2016-1409
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-05-29
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.
Affected configurations
• cisco ios 12.0\(1\)
• cisco ios 12.0\(1\)db
• cisco ios 12.0\(1\)s
• cisco ios 12.0\(1\)t
• cisco ios 12.0\(1\)t1
• cisco ios 12.0\(1\)xa
• cisco ios 12.0\(1\)xa1
• cisco ios 12.0\(1\)xa2
• cisco ios 12.0\(1\)xa3
• cisco ios 12.0\(1\)xa4
• cisco ios 12.0\(1\)xb
• cisco ios 12.0\(1\)xb1
• cisco ios 12.0\(1\)xe
• cisco ios 12.0\(1a\)
• cisco ios 12.0\(2\)
• cisco ios 12.0\(2\)db
• cisco ios 12.0\(2\)s
• cisco ios 12.0\(2\)t
• cisco ios 12.0\(2\)t1
• cisco ios 12.0\(2\)xc
• cisco ios 12.0\(2\)xc1
• cisco ios 12.0\(2\)xc2
• cisco ios 12.0\(2\)xd
• cisco ios 12.0\(2\)xd1
• cisco ios 12.0\(2\)xe
• cisco ios 12.0\(2\)xe1
• cisco ios 12.0\(2\)xe2
• cisco ios 12.0\(2\)xe3
• cisco ios 12.0\(2\)xe4
• cisco ios 12.0\(2\)xf
• cisco ios 12.0\(2\)xf1
• cisco ios 12.0\(2\)xf2
• cisco ios 12.0\(2\)xh
• cisco ios 12.0\(2\)xh1
• cisco ios 12.0\(2a\)
• cisco ios 12.0\(2a\)t1
• cisco ios 12.0\(2b\)
• cisco ios 12.0\(3\)
• cisco ios 12.0\(3\)db
• cisco ios 12.0\(3\)dc
• cisco ios 12.0\(3\)dc1
• cisco ios 12.0\(3\)s
• cisco ios 12.0\(3\)t
• cisco ios 12.0\(3\)t1
• cisco ios 12.0\(3\)t2
• cisco ios 12.0\(3\)t3
• cisco ios 12.0\(3\)xe
• cisco ios 12.0\(3\)xe1
• cisco ios 12.0\(3\)xe2
• cisco ios 12.0\(3\)xg
• cisco ios 12.0\(3a\)
• cisco ios 12.0\(3b\)
• cisco ios 12.0\(3c\)
• cisco ios 12.0\(3d\)
• cisco ios 12.0\(4\)
• cisco ios 12.0\(4\)db
• cisco ios 12.0\(4\)s
• cisco ios 12.0\(4\)t
• cisco ios 12.0\(4\)t1
• cisco ios 12.0\(4\)xe
… and 4831 more
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en Third Party Advisory
- http://www.securityfocus.com/bid/90872 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035962 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035963 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035964 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035965 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036651 www.securitytracker.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6 Vendor Advisory
- http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-en Third Party Advisory
- http://www.securityfocus.com/bid/90872 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035962 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035963 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035964 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035965 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1036651 www.securitytracker.com