Strix
26.1K

CVE-2016-6381

UnknownEPSS 3.21%

Last modified

CVE-2016-6381 is a vulnerability of currently unknown severity. Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.. EPSS estimates a 3.21% chance of exploitation in the next 30 days.

Description

Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.

Metrics

EPSS Probability
3.21%

86.5th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
CiscoIos12.4\(15\)t7
CiscoIos12.4\(15\)t8
CiscoIos12.4\(15\)t9
CiscoIos12.4\(15\)t10
CiscoIos12.4\(15\)t11
CiscoIos12.4\(15\)t12
CiscoIos12.4\(15\)t13
CiscoIos12.4\(15\)t14
CiscoIos12.4\(15\)t15
CiscoIos12.4\(15\)t16
CiscoIos12.4\(15\)t17
CiscoIos12.4\(15\)xl4
CiscoIos12.4\(15\)xl5
CiscoIos12.4\(20\)mr
CiscoIos12.4\(20\)mr2
CiscoIos12.4\(20\)mrb
CiscoIos12.4\(20\)mrb1
CiscoIos12.4\(20\)t1
CiscoIos12.4\(20\)t2
CiscoIos12.4\(20\)t3
CiscoIos12.4\(20\)t4
CiscoIos12.4\(20\)t5
CiscoIos12.4\(20\)t6
CiscoIos12.4\(22\)gc1
CiscoIos12.4\(22\)md
CiscoIos12.4\(22\)md1
CiscoIos12.4\(22\)md2
CiscoIos12.4\(22\)mda
CiscoIos12.4\(22\)mda1
CiscoIos12.4\(22\)mda2
CiscoIos12.4\(22\)mda3
CiscoIos12.4\(22\)mda4
CiscoIos12.4\(22\)mda5
CiscoIos12.4\(22\)mda6
CiscoIos12.4\(22\)t
CiscoIos12.4\(22\)t1
CiscoIos12.4\(22\)t2
CiscoIos12.4\(22\)t3
CiscoIos12.4\(22\)t4
CiscoIos12.4\(22\)t5
CiscoIos12.4\(22\)xr1
CiscoIos12.4\(22\)xr2
CiscoIos12.4\(22\)xr3
CiscoIos12.4\(22\)xr4
CiscoIos12.4\(22\)xr5
CiscoIos12.4\(22\)xr6
CiscoIos12.4\(22\)xr7
CiscoIos12.4\(22\)xr8
CiscoIos12.4\(22\)xr9
CiscoIos12.4\(22\)xr10

Showing 50 of 708 affected configurations. See NVD for the full list.

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2016-6381?
Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka Bug ID CSCuy47382.
How severe is CVE-2016-6381?
Severity scoring for CVE-2016-6381 is pending analysis. The EPSS model estimates a 3.21% probability of exploitation in the next 30 days.
How do I fix CVE-2016-6381?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2016-6381?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST