CVE-2016-6382
HighSummary
Cisco IOS versions 15.2 through 15.6 and IOS XE versions 3.6 through 3.17 and 16.1 are vulnerable to an attack that can cause a remote denial of service by a malformed IPv6 PIM register packet.
Risk Assessment
An attacker can remotely restart the device, leading to service downtime and potential disruptions in the network.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.
Other vulnerabilities in Cisco IOS and IOS XE
See all- CVE-2016-6384High
Cisco IOS versions 12.2 through 12.4 and 15.0 through 15.6, as well as IOS XE versions 3.1 through 3.17 and 16.2, are vulnerable to an attack that can lead to denial of service via crafted fields in an H.323 message.
- CVE-2016-6381High
A vulnerability in Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allows remote attackers to cause a denial of service via fragmented IKEv1 packets, leading to memory consumption or device reload.
- CVE-2015-0643High
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to denial of service attacks by sending malformed IKEv2 packets. Attackers can exploit this vulnerability to cause memory consumption and device reload.
- CVE-2015-0642High
Cisco IOS versions 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4, as well as IOS XE versions 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE before 3.7.1E, 3.3.xSG, 3.4.xSG, and 3.13.xS before 3.13.2S are vulnerable to an attack that can cause a device reload by sending malformed IKEv2 packets. This vulnerability can be exploited over both IPv4 and IPv6 networks.
- CVE-2015-0637High
The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS versions 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through 3.13.xS before 3.13.1S allows remote attackers to cause a denial of service (device reload) via spoofed AN messages.
Original NVD description (English source)
Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.