CVE-2016-1459

Published: Jul 17, 2016Modified: May 6, 2026

5.3

Vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.6 / Impact: 3.6

Source: NVD

Description

Cisco IOS 12.4 and 15.0 through 15.5 and IOS XE 3.13 through 3.17 allow remote authenticated users to cause a denial of service (device reload) via crafted attributes in a BGP message, aka Bug ID CSCuz21061.

Affected (45)

Products: Cisco: Ios, Ios Xe

Cisco

2 products

Ios

Ios Xe

Configuration A

45 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.4(15)t17
Cisco Ios	Version 12.4(19a)
Cisco Ios	Version 12.4(22)yb2
Cisco Ios	Version 12.4(24)gc4
Cisco Ios	Version 12.4(24)gc5
Cisco Ios	Version 12.4(4)xc7
Cisco Ios	Version 15.0(1)ex
Cisco Ios	Version 15.0(1)m10
Cisco Ios	Version 15.0(1)m9
Cisco Ios	Version 15.0(1)m
Cisco Ios	Version 15.0(1)s
Cisco Ios	Version 15.0(1)sy
Cisco Ios	Version 15.0(2)sg
Cisco Ios	Version 15.1(3)t4
Cisco Ios	Version 15.1(4)gc2
Cisco Ios	Version 15.1(4)m10
Cisco Ios	Version 15.2(3)t4
Cisco Ios	Version 15.2(4)gc3
Cisco Ios	Version 15.2(4)m10
Cisco Ios	Version 15.3(2)t4
Cisco Ios	Version 15.3(3)m7
Cisco Ios	Version 15.3(3)m
Cisco Ios	Version 15.4(2)t4
Cisco Ios	Version 15.4(3)m5
Cisco Ios	Version 15.5(2)t3
Cisco Ios	Version 15.5(3)m3
Cisco Ios Xe	Version 3.13.2s
Cisco Ios Xe	Version 3.13.3s
Cisco Ios Xe	Version 3.13.4s
Cisco Ios Xe	Version 3.13.5s
Cisco Ios Xe	Version 3.14.0s
Cisco Ios Xe	Version 3.14.1s
Cisco Ios Xe	Version 3.14.2s
Cisco Ios Xe	Version 3.14.3s
Cisco Ios Xe	Version 3.14.4s
Cisco Ios Xe	Version 3.15.1cs
Cisco Ios Xe	Version 3.15.2s
Cisco Ios Xe	Version 3.15.3s
Cisco Ios Xe	Version 3.16.0cs
Cisco Ios Xe	Version 3.16.1as
Cisco Ios Xe	Version 3.16.2s
Cisco Ios Xe	Version 3.16.3s
Cisco Ios Xe	Version 3.17.0s
Cisco Ios Xe	Version 3.17.1s
Cisco Ios Xe	Version 3.17.2s