CVE-2016-1349

Published: Mar 26, 2016Modified: May 6, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.

Affected (38)

Products: Cisco: Ios Xe · Intel: Core I5 9400f Firmware · Netgear: Jr6150 Firmware · +4 more

Show all products

Cisco: Ios Xe · Intel: Core I5 9400f Firmware · Netgear: Jr6150 Firmware · Samsung: X14j Firmware · Sun: Opensolaris · Zyxel: Gs1900 10hp Firmware · Zzinc: Keymouse Firmware

Cisco

1 product

Ios Xe

Intel

1 product

Core I5 9400f Firmware

1 product

1 product

1 product

1 product

1 product

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios Xe	Version 3.2ja_3.2.0ja
Cisco Ios Xe	Version 3.2se_3.2.0se
Cisco Ios Xe	Version 3.2se_3.2.1se
Cisco Ios Xe	Version 3.2se_3.2.2se
Cisco Ios Xe	Version 3.2se_3.2.3se
Cisco Ios Xe	Version 3.3se_3.3.0se
Cisco Ios Xe	Version 3.3se_3.3.1se
Cisco Ios Xe	Version 3.3se_3.3.2se
Cisco Ios Xe	Version 3.3se_3.3.3se
Cisco Ios Xe	Version 3.3se_3.3.4se
Cisco Ios Xe	Version 3.3se_3.3.5se
Cisco Ios Xe	Version 3.3xo_3.3.0xo
Cisco Ios Xe	Version 3.3xo_3.3.1xo
Cisco Ios Xe	Version 3.3xo_3.3.2xo
Cisco Ios Xe	Version 3.4sg_3.4.0sg
Cisco Ios Xe	Version 3.4sg_3.4.1sg
Cisco Ios Xe	Version 3.4sg_3.4.2sg
Cisco Ios Xe	Version 3.4sg_3.4.3sg
Cisco Ios Xe	Version 3.4sg_3.4.4sg
Cisco Ios Xe	Version 3.4sg_3.4.5sg
Cisco Ios Xe	Version 3.4sg_3.4.6sg
Cisco Ios Xe	Version 3.5e_3.5.0e
Cisco Ios Xe	Version 3.5e_3.5.1e
Cisco Ios Xe	Version 3.5e_3.5.2e
Cisco Ios Xe	Version 3.5e_3.5.3e
Cisco Ios Xe	Version 3.6e_3.6.0e
Cisco Ios Xe	Version 3.6e_3.6.1e
Cisco Ios Xe	Version 3.6e_3.6.2ae
Cisco Ios Xe	Version 3.6e_3.6.2e
Cisco Ios Xe	Version 3.7e_3.7.0e
Cisco Ios Xe	Version 3.7e_3.7.1e
Cisco Ios Xe	Version 3.7e_3.7.2e
Intel Core I5 9400f Firmware	All versions
Netgear Jr6150 Firmware	Before 2017-01-06
Samsung X14j Firmware	Version t-ms14jakucb-1102.5
Sun Opensolaris	Version snv_124
Zyxel Gs1900 10hp Firmware	Before 2.50\(aazi.0\)c0
Zzinc Keymouse Firmware	Version 3.08

Related CWEs

CWE-399

References (4)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi

Source: psirt@cisco.com

Vendor Advisory

http://www.securitytracker.com/id/1035385

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securitytracker.com/id/1035385

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.