NetSight
IP …
high7.5

CVE-2016-1409

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote at…

Impact

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.

Affected products

VendorProductAffected versions
CiscoIos
Versions 12.0\(1\), 12.0\(1\)db, 12.0\(1\)s, 12.0\(1\)t, 12.0\(1\)t1, 12.0\(1\)xa
CiscoIos Xe
Versions 2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.2.0, 2.2.1
CiscoIos Xr
Versions 2.0.0, 3.0.0, 3.0.1, 3.2.0, 3.2.1, 3.2.2
CiscoNx-Os
Versions 1.0\(1.110a\), 1.0\(1e\), 1.0\(2j\), 1.1\(0.825a\), 1.1\(1g\), 4.0\(0\)n1\(1a\)

Weakness classification

CWE-20

References