CVE-2016-1350

HIGH

Cisco - DoS

Title source: llm

Description

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.

References (4)

[Vendor Advisory] http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-sip

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/85372

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1035420

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1035421

Scores

CVSS v3 7.5

EPSS 0.0244

EPSS Percentile 84.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-399

Status draft

Affected Products (18)

cisco/ios_xe

lenovo/thinkcentre_e75s_firmware < m16kt61a

samsung/x14j_firmware

... and 3 more

Timeline

Published Mar 26, 2016

Tracked Since Feb 18, 2026