CVE-2016-1399

Severity CVSS v4.0:

Pending analysis

Type:

CWE-399 Resource Management Errors

Publication date:

14/05/2016

Last modified:

12/04/2025

Description

The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service (packet data corruption) via crafted IPv4 ICMP packets, aka Bug ID CSCuy13431.

Impact

Vector 3.x

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS v3.1 Severity and Metrics:

Base Score: 7.50 HIGH
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope (S): Unchanged
Confidentiality (C): None
Integrity (I): None
Availability (A): High

Base Score 3.x

7.50

Severity 3.x

HIGH

Vector 2.0

AV:N/AC:L/Au:N/C:N/I:N/A:P CVSS v2.0 Severity and Metrics:

Base Score: 5.00 MEDIUM
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): None
Availability (A): Physical

Base Score 2.0

5.00

Severity 2.0

MEDIUM

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:o:cisco:ios:15.2\(2\)eb:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)eb1:::::::*
cpe:2.3:h:cisco:ie-5000-12s12p-10g:-:::::::*
cpe:2.3:h:cisco:ie-5000-16s12p:-:::::::*
cpe:2.3:a:cisco:ios:15.2\(2\)ea2:::::::*
cpe:2.3:a:cisco:ios:15.2\(4\)ea:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)ea:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)ea1:::::::*
cpe:2.3:h:cisco:ie-4000-16gt4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-16t4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4gc4gp4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4gs8gp4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4s8p4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4t4p4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4tc4g-e:-:::::::*

To consult the complete list of CPE names with products and versions, see this page

CPE	From	Up to
cpe:2.3:o:cisco:ios:15.2\(2\)eb:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)eb1:::::::*
cpe:2.3:h:cisco:ie-5000-12s12p-10g:-:::::::*
cpe:2.3:h:cisco:ie-5000-16s12p:-:::::::*
cpe:2.3:a:cisco:ios:15.2\(2\)ea2:::::::*
cpe:2.3:a:cisco:ios:15.2\(4\)ea:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)ea:::::::*
cpe:2.3:o:cisco:ios:15.2\(2\)ea1:::::::*
cpe:2.3:h:cisco:ie-4000-16gt4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-16t4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4gc4gp4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4gs8gp4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4s8p4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4t4p4g-e:-:::::::*
cpe:2.3:h:cisco:ie-4000-4tc4g-e:-:::::::*

CVE-2016-1399

Description

Impact

Vulnerable products and versions

References to Advisories, Solutions, and Tools