CVE-2016-6386: Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4…

Description

Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)2.9% · higher than 87% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

IX

IOS XE · Cisco

3.1.0s; 3.1.0sg; 3.1.1s; 3.1.1sg; 3.1.2s; 3.1.3as; +34 more · source: NVD

IX

Ios XE 16.1 · Cisco

16.1.2 · source: NVD

IX

Ios XE 3.2ja · Cisco

3.2.0ja · source: NVD

IX

Ios XE 3.3sg · Cisco

3.3.0sg; 3.3.1sg; 3.3.2sg · source: NVD

IX

Ios XE 3.3xo · Cisco

3.3.0xo; 3.3.1xo; 3.3.2xo · source: NVD

IX

Ios XE 3.4sg · Cisco

3.4.0sg; 3.4.1sg; 3.4.2sg; 3.4.3sg; 3.4.4sg; 3.4.5sg; +2 more · source: NVD