CVE-2016-1370
MEDIUMCisco Prime Network Analysis Module < 6.2(1-b) - Denial of Service via IPv6 Payload Length Miscalculations
Title source: llmDescription
Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1036016
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3
Scores
CVSS v3
5.3
EPSS
0.0206
EPSS Percentile
79.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Details
CWE
CWE-20
Status
published
Products (2)
cisco/network_analysis_module_software
4.0.0
cisco/network_analysis_module_software
4.1.0
Published
Jun 03, 2016
Tracked Since
Feb 18, 2026