What is CVE-2016-9205?

CVE-2016-9205 is a high-severity vulnerability in Cisco Ios_xr, classified under CWE-399. CVSS score: 7.5/10. Published 2016-12-14.

How severe is CVE-2016-9205?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Cisco Ios_xr

CVE-2016-9205

A vulnerability in the HTTP 2.0 request handling code of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the Event Management Service daemon (emsd) to crash, resulting in a denial of service (DoS) condition…

EPSS: 0.007 (71.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Cisco Ios_xr — versions 6.1.1
N/a Cisco Ios Xr — versions Cisco IOS XR

Weakness classification (CWE)

CWE-399

References

psirt@cisco.com (x_refsource_CONFIRM, Vendor Advisory)
94813 (Third Party Advisory, VDB Entry, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2016-9205?: CVE-2016-9205 is a high-severity vulnerability in Cisco Ios_xr, classified under CWE-399. CVSS score: 7.5/10. Published 2016-12-14.
How severe is CVE-2016-9205?: High severity. CVSS v3 base score is 7.5 out of 10.