NetSight
high7.5

CVE-2016-1349

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (devi…

Impact

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.

Affected products

VendorProductAffected versions
CiscoIos Xe
Versions 3.2ja_3.2.0ja, 3.2se_3.2.0se, 3.2se_3.2.1se, 3.2se_3.2.2se, 3.2se_3.2.3se, 3.3se_3.3.0se
IntelCore I5-9400f Firmware
All versions
NetgearJr6150 Firmware
before 2017-01-06
SamsungX14j Firmware
Version t-ms14jakucb-1102.5
SunOpensolaris
Version snv_124
ZyxelGs1900-10hp Firmware
before 2.50\(aazi.0\)c0
ZzincKeymouse Firmware
Version 3.08

Weakness classification

References