CVE-2016-1348: cisco ios_xe Resource Management Errors
CVSS: 7.8v2.0HighModified
Published 26-03-2016Last modified 05-08-2024
Vulnerability summary
CVE-2016-1348 is a high (CVSS 7.8) Resource Management Errors vulnerability in cisco ios_xe. EPSS estimates a 1.95% chance of exploitation in the next 30 days, higher than 79.8% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v2.0 (NVD)EPSS score
1.95%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Timeline
- 26-03-2016PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.
CVSS metrics
2 scores · 1 source · 2 versionsHigh 7.5Preferred score · NVD (NIST)
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HSourcesSingle source
High 7.8Preferred score · NVD (NIST)
AV:N/AC:L/Au:N/C:N/I:N/A:CSourcesSingle source
EPSS trend
Probability
1.95%
Chance of exploitation in the next 30 days
Percentile
80%
Versus all other CVEs
30-day change
0.00 pp
From 1.95% on 18-09-2026
18-09-202618-10-2026
EPSS score1.95%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Cisco1 product
- ios_xe3.3xo_3.3.0xo | 3.3xo_3.3.1xo | 3.3xo_3.3.2xo | 3.5e_3.5.0e | 3.5e_3.5.1e | 3.5e_3.5.2e | 3.5e_3.5.3e | 3.5s_3.5.0s | 3.5s_3.5.1s | 3.5s_3.5.2s | 3.6e_3.6.0e | 3.6e_3.6.1e | 3.6e_3.6.2ae | 3.6e_3.6.2e | 3.6e_3.6.3e | 3.6s_3.6.0s | 3.6s_3.6.1s | 3.6s_3.6.2s | 3.7e_3.7.0e | 3.7e_3.7.1e | 3.7e_3.7.2e | 3.7s_3.7.0s | 3.7s_3.7.1s | 3.7s_3.7.2s | 3.7s_3.7.2ts | 3.7s_3.7.3s | 3.7s_3.7.4as | 3.7s_3.7.4s | 3.7s_3.7.5s | 3.7s_3.7.6s | 3.7s_3.7.7s | 3.8e_3.8.0e | 3.8s_3.8.0s | 3.8s_3.8.1s | 3.8s_3.8.2s | 3.9s_3.9.0as | 3.9s_3.9.0s | 3.9s_3.9.1as | 3.9s_3.9.1s | 3.9s_3.9.2s | 3.10s_3.10.0s | 3.10s_3.10.1s | 3.10s_3.10.1xbs | 3.10s_3.10.2s | 3.10s_3.10.3s | 3.10s_3.10.4s | 3.10s_3.10.5s | 3.10s_3.10.6s | 3.11s_3.11.0s | 3.11s_3.11.1s | 3.11s_3.11.2s | 3.11s_3.11.3s | 3.11s_3.11.4s | 3.12s_3.12.0s | 3.12s_3.12.1s | 3.12s_3.12.2s | 3.12s_3.12.3s | 3.12s_3.12.4s | 3.13s_3.13.0as | 3.13s_3.13.0s | 3.13s_3.13.1s | 3.13s_3.13.2as | 3.13s_3.13.2s | 3.13s_3.13.3s | 3.13s_3.13.4s | 3.14s_3.14.0s | 3.14s_3.14.1s | 3.14s_3.14.2s | 3.14s_3.14.3s | 3.15s_3.15.0s | 3.15s_3.15.1cs | 3.15s_3.15.1s | 3.15s_3.15.2s | 3.16s_3.16.0cs | 3.16s_3.16.0s | 3.16s_3.16.1as | 3.16s_3.16.1s
Netgear1 product
- jr6150_firmware< 2017-01-06
Samsung1 product
- x14j_firmwaret-ms14jakucb-1102.5
Sun1 product
- opensolarissnv_124
Zyxel1 product
- gs1900-10hp_firmware< 2.50\(aazi.0\)c0
Zzinc1 product
6 vendors · 6 products
References
2 links- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-dhcpv6Vendor AdvisoryX Refsource CISCO