#VU6181 Improper input validation in Cisco Systems, Inc products - CVE-2016-1409

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6181

#VU6181 Improper input validation in Cisco Systems, Inc products - CVE-2016-1409

Published: March 24, 2017


Vulnerability identifier: #VU6181
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:A/U:Amber
CVE-ID: CVE-2016-1409
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: The vulnerability is being exploited in the wild
Vulnerable software:
Cisco IOS XR
Cisco IOS
Cisco IOS XE
Software vendor:
Cisco Systems, Inc

Description

The vulnerability allows a remote attacker to perform a denial of service attack.

The vulnerability exists due to a logic error when parsing IPv6 Neighbor Discovery (ND) packets, sent directly to the device. A remote attacker can send specially crafted IPv6 traffic to the affected device and cause the device to stop processing IPv6 traffic.

Successful exploitation of the vulnerability will result in denial of service attack.

Note: according to Cisco, this vulnerability is being exploited in the wild.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.

External links