CVE-2016-1347

High

Published: 24/03/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Wide Area Application Services (WAAS) Express implementation in Cisco IOS versions 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment.

Risk Assessment

Attackers can remotely trigger a device reload, leading to service unavailability and potential disruptions in organizational operations.

Recommendation

It is recommended to update Cisco IOS to the latest version to mitigate this vulnerability and to monitor TCP traffic for suspicious activities.

Other vulnerabilities in Cisco IOS 15.1 to 15.5

CVE-2014-2112High
The SSL VPN feature in Cisco IOS versions 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests.

Original NVD description (English source)

The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708.