What is CVE-2016-6467?

CVE-2016-6467 is a high-severity vulnerability in Cisco Asr_5000, classified under CWE-399. CVSS score: 7.5/10. Published 2016-12-14.

How severe is CVE-2016-6467?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cisco Asr_5000

CVE-2016-6467

A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU)…

EPSS: 0.018 (83.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cisco Asr_5000
Cisco Asr_5000_series_software — versions 20.0.0, 21.0.0, 21.0.m0.64702
N/a Cisco Aggregation Services Router (Asr) 5000 Series Switch — versions Cisco Aggregation Services Router (ASR) 5000 Series Switch

Weakness classification (CWE)

CWE-399

References

1037416 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
94772 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-6467?: CVE-2016-6467 is a high-severity vulnerability in Cisco Asr_5000, classified under CWE-399. CVSS score: 7.5/10. Published 2016-12-14.
How severe is CVE-2016-6467?: High severity. CVSS v3 base score is 7.5 out of 10.