7.8

CVE-2016-1349: cisco ios_xe Resource Management Errors

CVSS: 7.8v2.0HighModified
Published 26-03-2016Last modified 05-08-2024
Open JSON

Vulnerability summary

CVE-2016-1349 is a high (CVSS 7.8) Resource Management Errors vulnerability in cisco ios_xe. EPSS estimates a 1.93% chance of exploitation in the next 30 days, higher than 79.6% of scored vulnerabilities.

Overall risk
32/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v2.0 (NVD)
EPSS score
1.93%
0%100%
Low · -0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Duplicates 1
CVE-2015-6264

Timeline

  1. 26-03-2016
    PublishedVulnerability first disclosed.
  2. 05-08-2024
    Last modifiedVulnerability information updated.

Description

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.

CVSS metrics

2 scores · 1 source · 2 versions

EPSS trend

Probability

1.93%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

-0.05 pp

From 1.98% on 18-09-2026

18-09-202618-10-2026
EPSS score
1.93%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Cisco1 product
  • ios_xe3.2ja_3.2.0ja | 3.2se_3.2.0se | 3.2se_3.2.1se | 3.2se_3.2.2se | 3.2se_3.2.3se | 3.3se_3.3.0se | 3.3se_3.3.1se | 3.3se_3.3.2se | 3.3se_3.3.3se | 3.3se_3.3.4se | 3.3se_3.3.5se | 3.3xo_3.3.0xo | 3.3xo_3.3.1xo | 3.3xo_3.3.2xo | 3.4sg_3.4.0sg | 3.4sg_3.4.1sg | 3.4sg_3.4.2sg | 3.4sg_3.4.3sg | 3.4sg_3.4.4sg | 3.4sg_3.4.5sg | 3.4sg_3.4.6sg | 3.5e_3.5.0e | 3.5e_3.5.1e | 3.5e_3.5.2e | 3.5e_3.5.3e | 3.6e_3.6.0e | 3.6e_3.6.1e | 3.6e_3.6.2ae | 3.6e_3.6.2e | 3.7e_3.7.0e | 3.7e_3.7.1e | 3.7e_3.7.2e
Intel1 product
Netgear1 product
Samsung1 product
Sun1 product
Zyxel1 product
Zzinc1 product

7 vendors · 7 products

References

2 links