CVE-2016-6393

High

Published: 05/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The AAA service in Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 and IOS XE versions 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message.

Risk Assessment

Attackers can exploit this vulnerability to remotely trigger a device reload, leading to service availability interruptions.

Recommendation

It is recommended to update the software to the latest version to mitigate this vulnerability and to monitor logs for unauthorized connection attempts.

Other vulnerabilities in Cisco IOS, IOS XE

CVE-2014-2108High
Cisco IOS versions 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S are vulnerable to an attack that can cause a device reload via a malformed IKEv2 packet.

Original NVD description (English source)

The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667.