CVE-2016-1409

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.

• CWE-20

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6Vendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-enThird Party Advisory
• http://www.securityfocus.com/bid/90872Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035962Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035963Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035964Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035965Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036651
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160525-ipv6Vendor Advisory
• http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20160824-01-ipv6-enThird Party Advisory
• http://www.securityfocus.com/bid/90872Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035962Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035963Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035964Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1035965Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1036651

Published

May 29, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-1403CISCO IP 8800 phones with software 11.0.1 and earlier allow …
• CVE-2016-1404Cisco UCS Invicta 4.3, 4.5, and 5.0.1 on Invicta appliances …
• CVE-2016-1405libclamav in ClamAV (aka Clam AntiVirus), as used in Advance…
• CVE-2016-1406The API web interface in Cisco Prime Infrastructure before 3…
• CVE-2016-1407Cisco IOS XR through 5.3.2 mishandles Local Packet Transport…
• CVE-2016-1408Cisco Prime Infrastructure 1.2 through 3.1 and Evolved Progr…
• CVE-2016-1410Cisco WebEx Meeting Center Original Release Base allows remo…
• CVE-2016-1411A vulnerability in the update functionality of Cisco AsyncOS…
• CVE-2016-1413The web interface in Cisco Firepower Management Center 5.4.0…
• CVE-2016-1415Cisco WebEx Meetings Player T29.10, when WRF file support is…
• CVE-2016-1416Cisco Prime Collaboration Provisioning 10.6 SP2 (aka 10.6.0.…
• CVE-2016-1417Untrusted search path vulnerability in Snort 2.9.7.0-WIN32 a…