CVE-2016-1425

MEDIUM

Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, 15.4(1.13)S - Denial of Service via Crafted LLDP Packet

Title source: llm

Description

Cisco IOS 15.0(2)SG5, 15.1(2)SG3, 15.2(1)E, 15.3(3)S, and 15.4(1.13)S allows remote attackers to cause a denial of service (device crash) via a crafted LLDP packet, aka Bug ID CSCun66735.

References (3)

Core 3

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/91545

Vendor Advisory vendor-advisory x_refsource_cisco

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160616-ios1

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1036129

Scores

CVSS v3 6.5

EPSS 0.0074

EPSS Percentile 50.1%

Attack Vector ADJACENT_NETWORK

CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE

CWE-119

Status published

Products (5)

cisco/ios 15.0\(2\)sg5

cisco/ios 15.1\(2\)sg3

cisco/ios 15.2\(1\)e

cisco/ios 15.3\(3\)s

cisco/ios 15.4\(1.13\)s

Published Jul 03, 2016

Tracked Since Feb 18, 2026