CVE-2016-1370

EPSS 0.47%
Veröffentlicht 03.06.2016 02:01:06
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Network Analysis Module Software Version4.0.0

Cisco ≫ Network Analysis Module

Cisco ≫ Network Analysis Module Software Version4.1.0

Cisco ≫ Network Analysis Module

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.47%	0.615

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3

Vendor Advisory

http://www.securitytracker.com/id/1036016

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2016-1370

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2016-1370

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2016-1370

EUVD