CVE-2016-1348: High severity cisco ios xe vulnerability
Published Mar 26, 2016
·Updated
Cisco IOS 15.0 through 15.5 and IOS XE 3.3 through 3.16 allow remote attackers to cause a denial of service (device reload) via a crafted DHCPv6 Relay message, aka Bug ID CSCus55821.
Affected Software
82 affected components
Cisco IOS XE=3.3xo_3.3.0xo
Cisco IOS XE=3.3xo_3.3.1xo
Cisco IOS XE=3.3xo_3.3.2xo
Cisco IOS XE=3.5e_3.5.0e
Cisco IOS XE=3.5e_3.5.1e
Cisco IOS XE=3.5e_3.5.2e
Cisco IOS XE=3.5e_3.5.3e
Cisco IOS XE=3.5s_3.5.0s
Cisco IOS XE=3.5s_3.5.1s
Cisco IOS XE=3.5s_3.5.2s
Cisco IOS XE=3.6e_3.6.0e
Cisco IOS XE=3.6e_3.6.1e
Cisco IOS XE=3.6e_3.6.2ae
Cisco IOS XE=3.6e_3.6.2e
Cisco IOS XE=3.6e_3.6.3e
Cisco IOS XE=3.6s_3.6.0s
Cisco IOS XE=3.6s_3.6.1s
Cisco IOS XE=3.6s_3.6.2s
Cisco IOS XE=3.7e_3.7.0e
Cisco IOS XE=3.7e_3.7.1e
Cisco IOS XE=3.7e_3.7.2e
Cisco IOS XE=3.7s_3.7.0s
Cisco IOS XE=3.7s_3.7.1s
Cisco IOS XE=3.7s_3.7.2s
Cisco IOS XE=3.7s_3.7.2ts
Cisco IOS XE=3.7s_3.7.3s
Cisco IOS XE=3.7s_3.7.4as
Cisco IOS XE=3.7s_3.7.4s
Cisco IOS XE=3.7s_3.7.5s
Cisco IOS XE=3.7s_3.7.6s
Cisco IOS XE=3.7s_3.7.7s
Cisco IOS XE=3.8e_3.8.0e
Cisco IOS XE=3.8s_3.8.0s
Cisco IOS XE=3.8s_3.8.1s
Cisco IOS XE=3.8s_3.8.2s
Cisco IOS XE=3.9s_3.9.0as
Cisco IOS XE=3.9s_3.9.0s
Cisco IOS XE=3.9s_3.9.1as
Cisco IOS XE=3.9s_3.9.1s
Cisco IOS XE=3.9s_3.9.2s
Cisco IOS XE=3.10s_3.10.0s
Cisco IOS XE=3.10s_3.10.1s
Cisco IOS XE=3.10s_3.10.1xbs
Cisco IOS XE=3.10s_3.10.2s
Cisco IOS XE=3.10s_3.10.3s
Cisco IOS XE=3.10s_3.10.4s
Cisco IOS XE=3.10s_3.10.5s
Cisco IOS XE=3.10s_3.10.6s
Cisco IOS XE=3.11s_3.11.0s
Cisco IOS XE=3.11s_3.11.1s
Cisco IOS XE=3.11s_3.11.2s
Cisco IOS XE=3.11s_3.11.3s
Cisco IOS XE=3.11s_3.11.4s
Cisco IOS XE=3.12s_3.12.0s
Cisco IOS XE=3.12s_3.12.1s
Cisco IOS XE=3.12s_3.12.2s
Cisco IOS XE=3.12s_3.12.3s
Cisco IOS XE=3.12s_3.12.4s
Cisco IOS XE=3.13s_3.13.0as
Cisco IOS XE=3.13s_3.13.0s
Cisco IOS XE=3.13s_3.13.1s
Cisco IOS XE=3.13s_3.13.2as
Cisco IOS XE=3.13s_3.13.2s
Cisco IOS XE=3.13s_3.13.3s
Cisco IOS XE=3.13s_3.13.4s
Cisco IOS XE=3.14s_3.14.0s
Cisco IOS XE=3.14s_3.14.1s
Cisco IOS XE=3.14s_3.14.2s
Cisco IOS XE=3.14s_3.14.3s
Cisco IOS XE=3.15s_3.15.0s
Cisco IOS XE=3.15s_3.15.1cs
Cisco IOS XE=3.15s_3.15.1s
Cisco IOS XE=3.15s_3.15.2s
Cisco IOS XE=3.16s_3.16.0cs
Cisco IOS XE=3.16s_3.16.0s
Cisco IOS XE=3.16s_3.16.1as
Cisco IOS XE=3.16s_3.16.1s
Netgear Jr6150 Firmware<2017-01-06
Samsung X14j Firmware=t-ms14jakucb-1102.5
Sun OpenSolaris=snv_124
Zyxel GS1900-10HP firmware<2.50\(aazi.0\)c0
Zzinc Keymouse Firmware Windows=3.08
Event History
Mar 26, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1348?
CVE-2016-1348 has a severity rating of high due to its potential to cause a denial of service.
2
How do I fix CVE-2016-1348?
To fix CVE-2016-1348, upgrade affected Cisco IOS and IOS XE versions to a patched release available from Cisco.
3
What systems are affected by CVE-2016-1348?
CVE-2016-1348 affects Cisco IOS versions 15.0 through 15.5 and IOS XE versions 3.3 through 3.16.
4
What type of attack is possible with CVE-2016-1348?
CVE-2016-1348 allows remote attackers to exploit a denial of service by sending crafted DHCPv6 Relay messages.
5
Is there a workaround for CVE-2016-1348?
There are no official workarounds for CVE-2016-1348, so upgrading to fixed versions is recommended.