var-201610-0265
Vulnerability from variot
The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667. Both Cisco IOS and IOSXESoftware are operating systems developed by Cisco for its network devices. Authentication, Authorization and Accounting (AAA) is one of the service modules for processing computer resources and user requirements and providing authentication and authorization for enterprises. This issue is being tracked by Cisco Bug ID CSCuy87667
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201610-0265", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ios xe", "scope": "eq", "trust": 1.8, "vendor": "cisco", "version": "16.2" }, { "model": "ios", "scope": "lte", "trust": 1.0, "vendor": "cisco", "version": "15.6" }, { "model": "ios xe", "scope": "lte", "trust": 1.0, "vendor": "cisco", "version": "3.18.0" }, { "model": "ios", "scope": "lte", "trust": 1.0, "vendor": "cisco", "version": "12.4" }, { "model": "ios", "scope": "gte", "trust": 1.0, "vendor": "cisco", "version": "15.0" }, { "model": "ios xe", "scope": "gte", "trust": 1.0, "vendor": "cisco", "version": "2.1.0" }, { "model": "ios", "scope": "gte", "trust": 1.0, "vendor": "cisco", "version": "12.0" }, { "model": "ios", "scope": "eq", "trust": 0.8, "vendor": "cisco", "version": "12.0 to 12.4" }, { "model": "ios", "scope": "eq", "trust": 0.8, "vendor": "cisco", "version": "15.0 to 15.6" }, { "model": "ios xe", "scope": "eq", "trust": 0.8, "vendor": "cisco", "version": "2.1 to 3.18" }, { "model": "ios", "scope": null, "trust": 0.6, "vendor": "cisco", "version": null }, { "model": "ios xe software", "scope": null, "trust": 0.6, "vendor": "cisco", "version": null }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "12.1\\(5\\)yg" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "12.1\\(5\\)yh" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "15.1\\(2\\)sg2" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "15.1\\(1\\)sy5" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "12.1\\(5\\)yh3" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "15.1\\(3\\)sve" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "15.2\\(5\\)st" }, { "model": "ios xe", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "3.4.2sg" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "12.4\\(15\\)xy" }, { "model": "ios", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "15.0\\(1r\\)m1" }, { "model": "automation stratix", "scope": "eq", "trust": 0.3, "vendor": "rockwell", "version": "59000" }, { "model": "ios xe software", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" }, { "model": "ios", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" }, { "model": "automation stratix", "scope": "ne", "trust": 0.3, "vendor": "rockwell", "version": "590015.6.3" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "BID", "id": "93196" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "12.4", "versionStartIncluding": "12.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "15.6", "versionStartIncluding": "15.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*", "cpe_name": [], "versionEndIncluding": "3.18.0", "versionStartIncluding": "2.1.0", "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:16.2:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2016-6393" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco.", "sources": [ { "db": "BID", "id": "93196" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ], "trust": 0.9 }, "cve": "CVE-2016-6393", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "confidentialityImpact": "NONE", "exploitabilityScore": 8.6, "impactScore": 6.9, "integrityImpact": "NONE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Medium", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 7.1, "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2016-6393", "impactScore": null, "integrityImpact": "None", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.8, "userInteractionRequired": null, "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "confidentialityImpact": "NONE", "exploitabilityScore": 8.6, "id": "CNVD-2016-08394", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:M/Au:N/C:N/I:N/A:C", "version": "2.0" }, { "accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 7.1, "confidentialityImpact": "NONE", "exploitabilityScore": 8.6, "id": "VHN-95213", "impactScore": 6.9, "integrityImpact": "NONE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:M/AU:N/C:N/I:N/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "exploitabilityScore": 3.9, "impactScore": 3.6, "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 7.5, "baseSeverity": "High", "confidentialityImpact": "None", "exploitabilityScore": null, "id": "CVE-2016-6393", "impactScore": null, "integrityImpact": "None", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2016-6393", "trust": 1.8, "value": "HIGH" }, { "author": "CNVD", "id": "CNVD-2016-08394", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201609-647", "trust": 0.6, "value": "HIGH" }, { "author": "VULHUB", "id": "VHN-95213", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "VULHUB", "id": "VHN-95213" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service (device reload) via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667. Both Cisco IOS and IOSXESoftware are operating systems developed by Cisco for its network devices. Authentication, Authorization and Accounting (AAA) is one of the service modules for processing computer resources and user requirements and providing authentication and authorization for enterprises. \nThis issue is being tracked by Cisco Bug ID CSCuy87667", "sources": [ { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "BID", "id": "93196" }, { "db": "VULHUB", "id": "VHN-95213" } ], "trust": 2.52 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2016-6393", "trust": 3.4 }, { "db": "BID", "id": "93196", "trust": 2.6 }, { "db": "ICS CERT", "id": "ICSA-16-287-04", "trust": 2.5 }, { "db": "SECTRACK", "id": "1036914", "trust": 1.7 }, { "db": "JVNDB", "id": "JVNDB-2016-005157", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201609-647", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2016-08394", "trust": 0.6 }, { "db": "ICS CERT", "id": "ICSA-17-094-04", "trust": 0.3 }, { "db": "VULHUB", "id": "VHN-95213", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "VULHUB", "id": "VHN-95213" }, { "db": "BID", "id": "93196" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "id": "VAR-201610-0265", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "VULHUB", "id": "VHN-95213" } ], "trust": 1.32263757 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" } ] }, "last_update_date": "2023-12-18T11:22:22.792000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20160928-aaados", "trust": 0.8, "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20160928-aaados" }, { "title": "Patch for CiscoIOSandIOSXESoftware Denial of Service Vulnerability (CNVD-2016-08394)", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/82020" }, { "title": "Cisco IOS and IOS XE Software Remediation measures for denial of service vulnerabilities", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=64415" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-399", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-95213" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.5, "url": "https://ics-cert.us-cert.gov/advisories/icsa-16-287-04" }, { "trust": 2.3, "url": "http://www.securityfocus.com/bid/93196" }, { "trust": 2.0, "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20160928-aaados" }, { "trust": 1.7, "url": "http://www.securitytracker.com/id/1036914" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6393" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6393" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.3, "url": "http://www.cisco.com/en/us/products/sw/iosswrel/products_ios_cisco_ios_software_category_home.html" }, { "trust": 0.3, "url": "https://ics-cert.us-cert.gov/advisories/icsa-17-094-04" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "VULHUB", "id": "VHN-95213" }, { "db": "BID", "id": "93196" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2016-08394" }, { "db": "VULHUB", "id": "VHN-95213" }, { "db": "BID", "id": "93196" }, { "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "db": "NVD", "id": "CVE-2016-6393" }, { "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-10-08T00:00:00", "db": "CNVD", "id": "CNVD-2016-08394" }, { "date": "2016-10-05T00:00:00", "db": "VULHUB", "id": "VHN-95213" }, { "date": "2016-09-28T00:00:00", "db": "BID", "id": "93196" }, { "date": "2016-10-13T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "date": "2016-10-05T20:59:07.853000", "db": "NVD", "id": "CVE-2016-6393" }, { "date": "2016-09-29T00:00:00", "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-10-08T00:00:00", "db": "CNVD", "id": "CNVD-2016-08394" }, { "date": "2020-05-11T00:00:00", "db": "VULHUB", "id": "VHN-95213" }, { "date": "2017-05-23T16:23:00", "db": "BID", "id": "93196" }, { "date": "2016-11-10T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-005157" }, { "date": "2020-05-11T17:24:11.173000", "db": "NVD", "id": "CVE-2016-6393" }, { "date": "2020-05-12T00:00:00", "db": "CNNVD", "id": "CNNVD-201609-647" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201609-647" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco IOS and IOS XE of AAA Denial of service in services (DoS) Vulnerability", "sources": [ { "db": "JVNDB", "id": "JVNDB-2016-005157" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "resource management error", "sources": [ { "db": "CNNVD", "id": "CNNVD-201609-647" } ], "trust": 0.6 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.