CVE-2016-1349

HIGH

Cisco IOS <15.2 - DoS

Title source: llm

Description

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.

References (2)

Scores

CVSS v3 7.5
EPSS 0.0070
EPSS Percentile 71.8%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-399
Status draft

Affected Products (38)

cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
cisco/ios_xe
... and 23 more

Timeline

Published Mar 26, 2016
Tracked Since Feb 18, 2026