First published: Sun Sep 18 2016(Updated: )
The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912.
Credit: ykramarz@cisco.com
Affected Software | Affected Version | How to fix |
---|---|---|
Cisco IOS | <=15.6\(1\)t |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2016-6403 has been classified as a denial of service vulnerability which can significantly impact system availability.
To mitigate CVE-2016-6403, upgrade to a version of Cisco IOS or IOS XE that is not impacted by this vulnerability.
CVE-2016-6403 is caused by the processing of crafted packets by the Data in Motion application in vulnerable versions of Cisco IOS.
CVE-2016-6403 affects Cisco IOS version 15.6(1)T and earlier when the IOx feature set is enabled.
Yes, CVE-2016-6403 allows remote attackers to exploit the vulnerability and cause a denial of service.