var-201611-0158
Vulnerability from variot
A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10). The Cisco ASR900 Series is a modular aggregation service router. This issue being tracked by Cisco Bug ID CSCuy15175
Show details on source website{ "@context": { "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#", "affected_products": { "@id": "https://www.variotdbs.pl/ref/affected_products" }, "configurations": { "@id": "https://www.variotdbs.pl/ref/configurations" }, "credits": { "@id": "https://www.variotdbs.pl/ref/credits" }, "cvss": { "@id": "https://www.variotdbs.pl/ref/cvss/" }, "description": { "@id": "https://www.variotdbs.pl/ref/description/" }, "exploit_availability": { "@id": "https://www.variotdbs.pl/ref/exploit_availability/" }, "external_ids": { "@id": "https://www.variotdbs.pl/ref/external_ids/" }, "iot": { "@id": "https://www.variotdbs.pl/ref/iot/" }, "iot_taxonomy": { "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/" }, "patch": { "@id": "https://www.variotdbs.pl/ref/patch/" }, "problemtype_data": { "@id": "https://www.variotdbs.pl/ref/problemtype_data/" }, "references": { "@id": "https://www.variotdbs.pl/ref/references/" }, "sources": { "@id": "https://www.variotdbs.pl/ref/sources/" }, "sources_release_date": { "@id": "https://www.variotdbs.pl/ref/sources_release_date/" }, "sources_update_date": { "@id": "https://www.variotdbs.pl/ref/sources_update_date/" }, "threat_type": { "@id": "https://www.variotdbs.pl/ref/threat_type/" }, "title": { "@id": "https://www.variotdbs.pl/ref/title/" }, "type": { "@id": "https://www.variotdbs.pl/ref/type/" } }, "@id": "https://www.variotdbs.pl/vuln/VAR-201611-0158", "affected_products": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/affected_products#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "model": "ios xe", "scope": "eq", "trust": 2.4, "vendor": "cisco", "version": "3.17.0s" }, { "model": "ios xe", "scope": "eq", "trust": 2.4, "vendor": "cisco", "version": "3.17.1s" }, { "model": "ios xe", "scope": "eq", "trust": 2.4, "vendor": "cisco", "version": "3.17.2s" }, { "model": "ios xe", "scope": "eq", "trust": 2.4, "vendor": "cisco", "version": "3.18.0s" }, { "model": "ios xe", "scope": "eq", "trust": 2.4, "vendor": "cisco", "version": "3.18.1s" }, { "model": "ios xe", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "3.18s" }, { "model": "ios xe", "scope": "eq", "trust": 1.6, "vendor": "cisco", "version": "3.17s" }, { "model": "asr series aggregation services routers 3.17.0s", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "900" }, { "model": "asr series aggregation services routers 3.17.1s", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "900" }, { "model": "asr series aggregation services routers 3.17.2s", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "900" }, { "model": "asr series aggregation services routers 3.18.0s", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "900" }, { "model": "asr series aggregation services routers 3.18.1s", "scope": "eq", "trust": 0.6, "vendor": "cisco", "version": "900" }, { "model": "ios xe software 3.18.1s", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "ios xe software 3.18.0s", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "ios xe software 3.17.2s", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "ios xe software 3.17.1s", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "ios xe software 3.17.0s", "scope": null, "trust": 0.3, "vendor": "cisco", "version": null }, { "model": "asr907", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" }, { "model": "asr903", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" }, { "model": "asr902", "scope": "eq", "trust": 0.3, "vendor": "cisco", "version": "0" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "BID", "id": "94072" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "configurations": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/configurations#", "children": { "@container": "@list" }, "cpe_match": { "@container": "@list" }, "data": { "@container": "@list" }, "nodes": { "@container": "@list" } }, "data": [ { "CVE_data_version": "4.0", "nodes": [ { "children": [], "cpe_match": [ { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.18s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true }, { "cpe23Uri": "cpe:2.3:o:cisco:ios_xe:3.17s:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true } ], "operator": "OR" } ] } ], "sources": [ { "db": "NVD", "id": "CVE-2016-6441" } ] }, "credits": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/credits#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco", "sources": [ { "db": "BID", "id": "94072" } ], "trust": 0.3 }, "cve": "CVE-2016-6441", "cvss": { "@context": { "cvssV2": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2" }, "cvssV3": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#" }, "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/" }, "severity": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/cvss/severity#" }, "@id": "https://www.variotdbs.pl/ref/cvss/severity" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" }, "@id": "https://www.variotdbs.pl/ref/sources" } }, "data": [ { "cvssV2": [ { "acInsufInfo": false, "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "NVD", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "impactScore": 10.0, "integrityImpact": "COMPLETE", "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "HIGH", "trust": 1.0, "userInteractionRequired": false, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "acInsufInfo": null, "accessComplexity": "Low", "accessVector": "Network", "authentication": "None", "author": "NVD", "availabilityImpact": "Complete", "baseScore": 10.0, "confidentialityImpact": "Complete", "exploitabilityScore": null, "id": "CVE-2016-6441", "impactScore": null, "integrityImpact": "Complete", "obtainAllPrivilege": null, "obtainOtherPrivilege": null, "obtainUserPrivilege": null, "severity": "High", "trust": 0.9, "userInteractionRequired": null, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "CNVD", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "id": "CNVD-2016-10615", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.6, "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0" }, { "accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "author": "VULHUB", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "exploitabilityScore": 10.0, "id": "VHN-95261", "impactScore": 10.0, "integrityImpact": "COMPLETE", "severity": "HIGH", "trust": 0.1, "vectorString": "AV:N/AC:L/AU:N/C:C/I:C/A:C", "version": "2.0" } ], "cvssV3": [ { "attackComplexity": "LOW", "attackVector": "NETWORK", "author": "NVD", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "exploitabilityScore": 3.9, "impactScore": 5.9, "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "trust": 1.0, "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" }, { "attackComplexity": "Low", "attackVector": "Network", "author": "NVD", "availabilityImpact": "High", "baseScore": 9.8, "baseSeverity": "Critical", "confidentialityImpact": "High", "exploitabilityScore": null, "id": "CVE-2016-6441", "impactScore": null, "integrityImpact": "High", "privilegesRequired": "None", "scope": "Unchanged", "trust": 0.8, "userInteraction": "None", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.0" } ], "severity": [ { "author": "NVD", "id": "CVE-2016-6441", "trust": 1.8, "value": "CRITICAL" }, { "author": "CNVD", "id": "CNVD-2016-10615", "trust": 0.6, "value": "HIGH" }, { "author": "CNNVD", "id": "CNNVD-201611-007", "trust": 0.6, "value": "CRITICAL" }, { "author": "VULHUB", "id": "VHN-95261", "trust": 0.1, "value": "HIGH" }, { "author": "VULMON", "id": "CVE-2016-6441", "trust": 0.1, "value": "HIGH" } ] } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULHUB", "id": "VHN-95261" }, { "db": "VULMON", "id": "CVE-2016-6441" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "description": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/description#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. This vulnerability affects Cisco ASR 900 Series Aggregation Services Routers (ASR902, ASR903, and ASR907) that are running the following releases of Cisco IOS XE Software: 3.17.0S 3.17.1S 3.17.2S 3.18.0S 3.18.1S. More Information: CSCuy15175. Known Affected Releases: 15.6(1)S 15.6(2)S. Known Fixed Releases: 15.6(1)S2.12 15.6(1.17)S0.41 15.6(1.17)SP 15.6(2)SP 16.4(0.183) 16.5(0.10). The Cisco ASR900 Series is a modular aggregation service router. \nThis issue being tracked by Cisco Bug ID CSCuy15175", "sources": [ { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "BID", "id": "94072" }, { "db": "VULHUB", "id": "VHN-95261" }, { "db": "VULMON", "id": "CVE-2016-6441" } ], "trust": 2.61 }, "external_ids": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/external_ids#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "db": "NVD", "id": "CVE-2016-6441", "trust": 3.5 }, { "db": "BID", "id": "94072", "trust": 2.1 }, { "db": "SECTRACK", "id": "1037179", "trust": 1.2 }, { "db": "JVNDB", "id": "JVNDB-2016-005730", "trust": 0.8 }, { "db": "CNNVD", "id": "CNNVD-201611-007", "trust": 0.7 }, { "db": "CNVD", "id": "CNVD-2016-10615", "trust": 0.6 }, { "db": "VULHUB", "id": "VHN-95261", "trust": 0.1 }, { "db": "VULMON", "id": "CVE-2016-6441", "trust": 0.1 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULHUB", "id": "VHN-95261" }, { "db": "VULMON", "id": "CVE-2016-6441" }, { "db": "BID", "id": "94072" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "id": "VAR-201611-0158", "iot": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": true, "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULHUB", "id": "VHN-95261" } ], "trust": 1.33274735 }, "iot_taxonomy": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "category": [ "Network device" ], "sub_category": null, "trust": 0.6 } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" } ] }, "last_update_date": "2023-12-18T14:05:55.858000Z", "patch": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/patch#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "title": "cisco-sa-20161102-tl1", "trust": 0.8, "url": "http://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20161102-tl1" }, { "title": "Patch for Cisco ASR900Series AggregationServicesRouters Buffer Overflow Vulnerability", "trust": 0.6, "url": "https://www.cnvd.org.cn/patchinfo/show/83523" }, { "title": "Cisco ASR 900 Series Buffer Overflow Vulnerability Fix", "trust": 0.6, "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=65237" }, { "title": "Threatpost", "trust": 0.1, "url": "https://threatpost.com/cisco-patches-critical-bugs-in-900-series-routers-prime-home-server/121765/" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULMON", "id": "CVE-2016-6441" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "problemtype_data": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "problemtype": "CWE-119", "trust": 1.9 } ], "sources": [ { "db": "VULHUB", "id": "VHN-95261" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" } ] }, "references": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/references#", "data": { "@container": "@list" }, "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": [ { "trust": 2.7, "url": "https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20161102-tl1" }, { "trust": 1.2, "url": "http://www.securityfocus.com/bid/94072" }, { "trust": 1.2, "url": "http://www.securitytracker.com/id/1037179" }, { "trust": 0.8, "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2016-6441" }, { "trust": 0.8, "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2016-6441" }, { "trust": 0.3, "url": "http://www.cisco.com/" }, { "trust": 0.1, "url": "https://cwe.mitre.org/data/definitions/119.html" }, { "trust": 0.1, "url": "https://nvd.nist.gov" }, { "trust": 0.1, "url": "https://threatpost.com/cisco-patches-critical-bugs-in-900-series-routers-prime-home-server/121765/" } ], "sources": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULHUB", "id": "VHN-95261" }, { "db": "VULMON", "id": "CVE-2016-6441" }, { "db": "BID", "id": "94072" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "sources": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#", "data": { "@container": "@list" } }, "data": [ { "db": "CNVD", "id": "CNVD-2016-10615" }, { "db": "VULHUB", "id": "VHN-95261" }, { "db": "VULMON", "id": "CVE-2016-6441" }, { "db": "BID", "id": "94072" }, { "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "db": "NVD", "id": "CVE-2016-6441" }, { "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "sources_release_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-11-04T00:00:00", "db": "CNVD", "id": "CNVD-2016-10615" }, { "date": "2016-11-03T00:00:00", "db": "VULHUB", "id": "VHN-95261" }, { "date": "2016-11-03T00:00:00", "db": "VULMON", "id": "CVE-2016-6441" }, { "date": "2016-11-02T00:00:00", "db": "BID", "id": "94072" }, { "date": "2016-11-08T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "date": "2016-11-03T21:59:02.967000", "db": "NVD", "id": "CVE-2016-6441" }, { "date": "2016-11-04T00:00:00", "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "sources_update_date": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#", "data": { "@container": "@list" } }, "data": [ { "date": "2016-11-04T00:00:00", "db": "CNVD", "id": "CNVD-2016-10615" }, { "date": "2017-07-29T00:00:00", "db": "VULHUB", "id": "VHN-95261" }, { "date": "2017-07-29T00:00:00", "db": "VULMON", "id": "CVE-2016-6441" }, { "date": "2016-11-24T01:07:00", "db": "BID", "id": "94072" }, { "date": "2016-11-08T00:00:00", "db": "JVNDB", "id": "JVNDB-2016-005730" }, { "date": "2017-07-29T01:34:18.273000", "db": "NVD", "id": "CVE-2016-6441" }, { "date": "2016-11-04T00:00:00", "db": "CNNVD", "id": "CNNVD-201611-007" } ] }, "threat_type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/threat_type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "remote", "sources": [ { "db": "CNNVD", "id": "CNNVD-201611-007" } ], "trust": 0.6 }, "title": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/title#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "Cisco ASR 900 Series router IOS XE of TL1 Vulnerabilities that cause code reloads", "sources": [ { "db": "JVNDB", "id": "JVNDB-2016-005730" } ], "trust": 0.8 }, "type": { "@context": { "@vocab": "https://www.variotdbs.pl/ref/type#", "sources": { "@container": "@list", "@context": { "@vocab": "https://www.variotdbs.pl/ref/sources#" } } }, "data": "buffer overflow", "sources": [ { "db": "CNNVD", "id": "CNNVD-201611-007" } ], "trust": 0.6 } }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.