CVE-2016-1350: High severity cisco ios xe vulnerability
Published Mar 26, 2016
·Updated
Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.
Affected Software
18 affected components
Cisco IOS XE=3.8.0s
Cisco IOS XE=3.8.1s
Cisco IOS XE=3.8.2s
Cisco IOS XE=3.9.0as
Cisco IOS XE=3.9.0s
Cisco IOS XE=3.9.1as
Cisco IOS XE=3.9.1s
Cisco IOS XE=3.9.2s
Cisco IOS XE=3.10.0s
Cisco IOS XE=3.10.1s
Cisco IOS XE=3.10.1xbs
Cisco IOS XE=3.10.2s
Cisco IOS XE=3.11.0s
Lenovo Thinkcentre E75s Firmware<m16kt61a
Samsung X14j Firmware=t-ms14jakucb-1102.5
Sun OpenSolaris=snv_124
Zyxel GS1900-10HP firmware<2.50\(aazi.0\)c0
Zzinc Keymouse Firmware Windows=3.08
Event History
Mar 26, 2016
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-1350?
CVE-2016-1350 is classified as a denial of service vulnerability which can lead to device reload.
2
How do I fix CVE-2016-1350?
To mitigate CVE-2016-1350, update to a fixed version of Cisco IOS or IOS XE that addresses this vulnerability.
3
What products are affected by CVE-2016-1350?
CVE-2016-1350 affects multiple versions of Cisco IOS 15.3, 15.4, and Cisco IOS XE 3.8 through 3.11.
4
Can CVE-2016-1350 be exploited remotely?
Yes, CVE-2016-1350 can be exploited remotely via malformed SIP messages.
5
What are the consequences of CVE-2016-1350 exploitation?
Exploitation of CVE-2016-1350 can result in a total denial of service, causing the affected Cisco device to reload.