CVE-2016-6393: High severity cisco ios vulnerability
The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-6393?
CVE-2016-6393 has a high severity rating as it can lead to a denial of service by causing device reloads.
How do I fix CVE-2016-6393?
To fix CVE-2016-6393, upgrade Cisco IOS or IOS XE to a version that is not affected, specifically versions above those listed in the vulnerability.
What devices are affected by CVE-2016-6393?
CVE-2016-6393 affects Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6, as well as IOS XE versions 2.1 through 3.18 and 16.2.
Can CVE-2016-6393 be exploited remotely?
Yes, CVE-2016-6393 can be exploited remotely through mishandled SSH connection attempts.
What is the impact of CVE-2016-6393 on network availability?
The impact of CVE-2016-6393 on network availability is significant as it can cause devices to reload, leading to temporary outages.