Buffer overflow in Cisco iOS Xe
CVE-2016-6441
A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10).
Vulnerability class: Buffer Overflow
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.049 (91.8th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 92nd percentile — 91.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.049 · newest: 0.049 · change: 0.000
Affected products
- Cisco iOS Xe — versions 3.17.0s, 3.17.1s, 3.17.2s
- Cisco iOS Xe 3.17 And 3.18 — versions Cisco IOS XE 3.17 and 3.18
Weakness classification (CWE)
References
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161102… (Vendor Advisory)
- www.securityfocus.com/bid/94072 (vdb-entry)
- www.securitytracker.com/id/1037179 (vdb-entry)
Frequently asked questions
- What is CVE-2016-6441?
- CVE-2016-6441 is a critical-severity vulnerability in Cisco iOS Xe, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 9.8/10. Published 2016-11-03.
- How severe is CVE-2016-6441?
- Critical severity. CVSS v3 base score is 9.8 out of 10.