CVE-2016-1349 The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list paramet...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios xe | = 3.2ja_3.2.0ja | No fix listed |
| cisco ios xe | = 3.2se_3.2.0se | No fix listed |
| cisco ios xe | = 3.2se_3.2.1se | No fix listed |
| cisco ios xe | = 3.2se_3.2.2se | No fix listed |
| cisco ios xe | = 3.2se_3.2.3se | No fix listed |
| cisco ios xe | = 3.3se_3.3.0se | No fix listed |
| cisco ios xe | = 3.3se_3.3.1se | No fix listed |
| cisco ios xe | = 3.3se_3.3.2se | No fix listed |
| cisco ios xe | = 3.3se_3.3.3se | No fix listed |
| cisco ios xe | = 3.3se_3.3.4se | No fix listed |
| cisco ios xe | = 3.3se_3.3.5se | No fix listed |
| cisco ios xe | = 3.3xo_3.3.0xo | No fix listed |
| cisco ios xe | = 3.3xo_3.3.1xo | No fix listed |
| cisco ios xe | = 3.3xo_3.3.2xo | No fix listed |
| cisco ios xe | = 3.4sg_3.4.0sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.1sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.2sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.3sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.4sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.5sg | No fix listed |
| cisco ios xe | = 3.4sg_3.4.6sg | No fix listed |
| cisco ios xe | = 3.5e_3.5.0e | No fix listed |
| cisco ios xe | = 3.5e_3.5.1e | No fix listed |
| cisco ios xe | = 3.5e_3.5.2e | No fix listed |
| cisco ios xe | = 3.5e_3.5.3e | No fix listed |
Show 13 more
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ios xe | = 3.6e_3.6.0e | No fix listed |
| cisco ios xe | = 3.6e_3.6.1e | No fix listed |
| cisco ios xe | = 3.6e_3.6.2ae | No fix listed |
| cisco ios xe | = 3.6e_3.6.2e | No fix listed |
| cisco ios xe | = 3.7e_3.7.0e | No fix listed |
| cisco ios xe | = 3.7e_3.7.1e | No fix listed |
| cisco ios xe | = 3.7e_3.7.2e | No fix listed |
| intel core i5-9400f firmware | All versions | No fix listed |
| netgear jr6150 firmware | < 2017-01-06 | 2017-01-06 |
| samsung x14j firmware | = t-ms14jakucb-1102.5 | No fix listed |
| sun opensolaris | = snv_124 | No fix listed |
| zyxel GS1900-10HP firmware | < 2.50\(aazi.0\)c0 | 2.50\(aazi.0\)c0 |
| zzinc keymouse firmware | = 3.08 | No fix listed |
References
- 20160323 Cisco IOS and IOS XE Software Smart Install Denial of Service Vulnerability vendor-advisory
- 1035385 vdb-entry