CVE-2016-1351
HIGHCVSS 7.5/10EPSS 3.72%
Last modified
CVE-2016-1351 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279.. EPSS estimates a 3.72% chance of exploitation in the next 30 days.
Description
The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.1\(1\)sy1 |
| Cisco | Ios | 15.1\(1\)sy2 |
| Cisco | Ios | 15.1\(1\)sy3 |
| Cisco | Ios | 15.1\(1\)sy4 |
| Cisco | Ios | 15.1\(1\)sy5 |
| Cisco | Ios | 15.1\(2\)sy |
| Cisco | Ios | 15.1\(2\)sy1 |
| Cisco | Ios | 15.1\(2\)sy2 |
| Cisco | Ios | 15.1\(2\)sy3 |
| Cisco | Ios | 15.1\(2\)sy4 |
| Cisco | Ios | 15.1\(2\)sy4a |
| Cisco | Ios | 15.1\(2\)sy5 |
| Cisco | Ios | 15.1\(2\)sy6 |
| Cisco | Ios | 15.2\(1\)sy |
| Cisco | Ios | 15.2\(1\)sy0a |
| Cisco | Ios | 15.2\(1\)sy1 |
| Cisco | Ios | 15.3\(3\)jk6 |
| Cisco | Nx-Os | 4.1\(2\) |
| Cisco | Nx-Os | 4.1\(3\) |
| Cisco | Nx-Os | 4.1\(4\) |
| Cisco | Nx-Os | 4.1\(5\) |
| Cisco | Nx-Os | 4.2\(2a\) |
| Cisco | Nx-Os | 4.2\(3\) |
| Cisco | Nx-Os | 4.2\(4\) |
| Cisco | Nx-Os | 4.2\(6\) |
| Cisco | Nx-Os | 4.2\(8\) |
| Cisco | Nx-Os | 5.0\(2a\) |
| Cisco | Nx-Os | 5.0\(3\) |
| Cisco | Nx-Os | 5.0\(5\) |
| Cisco | Nx-Os | 5.1\(1\) |
| Cisco | Nx-Os | 5.1\(1a\) |
| Cisco | Nx-Os | 5.1\(3\) |
| Cisco | Nx-Os | 5.1\(4\) |
| Cisco | Nx-Os | 5.1\(5\) |
| Cisco | Nx-Os | 5.1\(6\) |
| Cisco | Nx-Os | 5.2\(1\) |
| Cisco | Nx-Os | 5.2\(3a\) |
| Cisco | Nx-Os | 5.2\(4\) |
| Cisco | Nx-Os | 5.2\(5\) |
| Cisco | Nx-Os | 5.2\(7\) |
| Cisco | Nx-Os | 5.2\(9\) |
| Cisco | Nx-Os | 6.0\(1\) |
| Cisco | Nx-Os | 6.0\(2\) |
| Cisco | Nx-Os | 6.0\(3\) |
| Cisco | Nx-Os | 6.0\(4\) |
| Cisco | Nx-Os | 6.1\(1\) |
| Cisco | Nx-Os | 6.1\(2\) |
| Cisco | Nx-Os | 6.1\(3\) |
| Cisco | Nx-Os | 6.1\(4\) |
| Cisco | Nx-Os | 6.1\(4a\) |
Showing 50 of 59 affected configurations. See NVD for the full list.
References
- http://www.securitytracker.com/id/1035383Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035384Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035383Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1035384Broken Link, Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2016-1351?
The Locator/ID Separation Protocol (LISP) implementation in Cisco IOS 15.1 and 15.2 and NX-OS 4.1 through 6.2 allows remote attackers to cause a denial of service (device reload) via a crafted header in a packet, aka Bug ID CSCuu64279.
How severe is CVE-2016-1351?
CVE-2016-1351 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 3.72% probability of exploitation in the next 30 days.
How do I fix CVE-2016-1351?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2016
- CVE-2016-1345Cisco FireSIGHT System Software 5.4.0 through 6.0.1 and ASA …
- CVE-2016-1346The kernel in Cisco TelePresence Server 3.0 through 4.2(4.18…
- CVE-2016-1347The Wide Area Application Services (WAAS) Express implementa…7.5
- CVE-2016-1348Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allo…
- CVE-2016-1349The Smart Install client implementation in Cisco IOS 12.2, 1…
- CVE-2016-1350Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and …
- CVE-2016-1352Cisco Unified Computing System (UCS) Central Software 1.3(1b…
- CVE-2016-1353The TCP implementation in Cisco Videoscape Distribution Suit…
- CVE-2016-1354Cross-site scripting (XSS) vulnerability in Cisco Unified Co…
- CVE-2016-1355Cross-site scripting (XSS) vulnerability in the Device Manag…
- CVE-2016-1356Cisco FireSIGHT System Software 6.1.0 does not use a constan…
- CVE-2016-1357The password-management administration component in Cisco Po…
Are you affected by CVE-2016-1351?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST