Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2016-6386


Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID CSCux66005.


Security Impact Summary

This vulnerability carries a HIGH severity rating with a CVSS v3.1 score of 7.5, indicating it can be exploited remotely over the network with relatively low complexity without requiring user interaction and does not require pre-existing privileges . The vulnerability impacts and availability (service disruption) for affected systems. Impacting 6 products from cisco, from cisco, from cisco and 3 others, organizations running these solutions should prioritize assessment and patching.

Historical Context

First disclosed in 2016, this vulnerability was reported during a period defined by widespread IoT adoption challenges, mobile security concerns, and the emergence of advanced persistent threat (APT) techniques. Contemporary mitigation strategies focused on secure development practices and third-party component vetting.


Published

2016-10-05T17:59:03.807

Last Modified

2025-04-12T10:46:40.837

Status

Deferred

Source

[email protected]

Severity

CVSSv3.0: 7.5 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 3.1.0s Yes
Operating System cisco ios_xe 3.1.0sg Yes
Operating System cisco ios_xe 3.1.1s Yes
Operating System cisco ios_xe 3.1.1sg Yes
Operating System cisco ios_xe 3.1.2s Yes
Operating System cisco ios_xe 3.1.3as Yes
Operating System cisco ios_xe 3.1.4as Yes
Operating System cisco ios_xe 3.1.4s Yes
Operating System cisco ios_xe 3.2.0se Yes
Operating System cisco ios_xe 3.2.1s Yes
Operating System cisco ios_xe 3.2.1se Yes
Operating System cisco ios_xe 3.2.2s Yes
Operating System cisco ios_xe 3.2.2se Yes
Operating System cisco ios_xe 3.2.3se Yes
Operating System cisco ios_xe 3.3.0s Yes
Operating System cisco ios_xe 3.3.0se Yes
Operating System cisco ios_xe 3.3.0sq Yes
Operating System cisco ios_xe 3.3.1s Yes
Operating System cisco ios_xe 3.3.1se Yes
Operating System cisco ios_xe 3.3.1sq Yes
Operating System cisco ios_xe 3.3.2s Yes
Operating System cisco ios_xe 3.3.2se Yes
Operating System cisco ios_xe 3.3.3se Yes
Operating System cisco ios_xe 3.3.4se Yes
Operating System cisco ios_xe 3.3.5se Yes
Operating System cisco ios_xe 3.4.0as Yes
Operating System cisco ios_xe 3.4.0s Yes
Operating System cisco ios_xe 3.4.0sq Yes
Operating System cisco ios_xe 3.4.1s Yes
Operating System cisco ios_xe 3.4.1sq Yes
Operating System cisco ios_xe 3.4.2s Yes
Operating System cisco ios_xe 3.4.3s Yes
Operating System cisco ios_xe 3.4.4s Yes
Operating System cisco ios_xe 3.4.5s Yes
Operating System cisco ios_xe 3.4.6s Yes
Operating System cisco ios_xe 3.5.0e Yes
Operating System cisco ios_xe 3.5.0s Yes
Operating System cisco ios_xe 3.5.0sq Yes
Operating System cisco ios_xe 3.5.1e Yes
Operating System cisco ios_xe 3.5.1s Yes
Operating System cisco ios_xe 3.5.1sq Yes
Operating System cisco ios_xe 3.5.2e Yes
Operating System cisco ios_xe 3.5.2s Yes
Operating System cisco ios_xe 3.5.2sq Yes
Operating System cisco ios_xe 3.5.3e Yes
Operating System cisco ios_xe 3.5.3sq Yes
Operating System cisco ios_xe 3.6.0e Yes
Operating System cisco ios_xe 3.6.0s Yes
Operating System cisco ios_xe 3.6.1e Yes
Operating System cisco ios_xe 3.6.1s Yes
Operating System cisco ios_xe 3.6.2ae Yes
Operating System cisco ios_xe 3.6.2e Yes
Operating System cisco ios_xe 3.6.2s Yes
Operating System cisco ios_xe 3.6.3e Yes
Operating System cisco ios_xe 3.6.4e Yes
Operating System cisco ios_xe 3.7.0s Yes
Operating System cisco ios_xe 3.7.1e Yes
Operating System cisco ios_xe 3.7.1s Yes
Operating System cisco ios_xe 3.7.2e Yes
Operating System cisco ios_xe 3.7.2s Yes
Operating System cisco ios_xe 3.7.2ts Yes
Operating System cisco ios_xe 3.7.3e Yes
Operating System cisco ios_xe 3.7.3s Yes
Operating System cisco ios_xe 3.7.4as Yes
Operating System cisco ios_xe 3.7.4s Yes
Operating System cisco ios_xe 3.7.5s Yes
Operating System cisco ios_xe 3.7.6s Yes
Operating System cisco ios_xe 3.8.0e Yes
Operating System cisco ios_xe 3.8.0ex Yes
Operating System cisco ios_xe 3.8.0s Yes
Operating System cisco ios_xe 3.8.1e Yes
Operating System cisco ios_xe 3.8.1s Yes
Operating System cisco ios_xe 3.8.2s Yes
Operating System cisco ios_xe 3.9.0as Yes
Operating System cisco ios_xe 3.9.0s Yes
Operating System cisco ios_xe 3.9.1as Yes
Operating System cisco ios_xe 3.9.1s Yes
Operating System cisco ios_xe 3.9.2s Yes
Operating System cisco ios_xe 3.10.0s Yes
Operating System cisco ios_xe 3.10.1s Yes
Operating System cisco ios_xe 3.10.1xbs Yes
Operating System cisco ios_xe 3.10.2s Yes
Operating System cisco ios_xe 3.10.3s Yes
Operating System cisco ios_xe 3.10.4s Yes
Operating System cisco ios_xe 3.10.5s Yes
Operating System cisco ios_xe 3.10.6s Yes
Operating System cisco ios_xe 3.10.7s Yes
Operating System cisco ios_xe 3.11.0s Yes
Operating System cisco ios_xe 3.11.1s Yes
Operating System cisco ios_xe 3.11.2s Yes
Operating System cisco ios_xe 3.11.3s Yes
Operating System cisco ios_xe 3.11.4s Yes
Operating System cisco ios_xe 3.12.0as Yes
Operating System cisco ios_xe 3.12.0s Yes
Operating System cisco ios_xe 3.12.1s Yes
Operating System cisco ios_xe 3.12.2s Yes
Operating System cisco ios_xe 3.12.3s Yes
Operating System cisco ios_xe 3.12.4s Yes
Operating System cisco ios_xe 3.13.0as Yes
Operating System cisco ios_xe 3.13.0s Yes
Operating System cisco ios_xe 3.13.1s Yes
Operating System cisco ios_xe 3.13.2as Yes
Operating System cisco ios_xe 3.13.2s Yes
Operating System cisco ios_xe 3.13.3s Yes
Operating System cisco ios_xe 3.13.4s Yes
Operating System cisco ios_xe 3.14.0s Yes
Operating System cisco ios_xe 3.14.1s Yes
Operating System cisco ios_xe 3.14.2s Yes
Operating System cisco ios_xe 3.14.3s Yes
Operating System cisco ios_xe 3.15.0s Yes
Operating System cisco ios_xe 3.15.1cs Yes
Operating System cisco ios_xe 3.15.1s Yes
Operating System cisco ios_xe 3.15.2s Yes
Operating System cisco ios_xe 3.16.0cs Yes
Operating System cisco ios_xe 3.16.0s Yes
Operating System cisco ios_xe 3.16.1as Yes
Operating System cisco ios_xe 3.16.1s Yes
Operating System cisco ios_xe 3.17.0s Yes
Operating System cisco ios_xe_16.1 16.1.2 Yes
Operating System cisco ios_xe_3.2ja 3.2.0ja Yes
Operating System cisco ios_xe_3.3sg 3.3.0sg Yes
Operating System cisco ios_xe_3.3sg 3.3.1sg Yes
Operating System cisco ios_xe_3.3sg 3.3.2sg Yes
Operating System cisco ios_xe_3.3xo 3.3.0xo Yes
Operating System cisco ios_xe_3.3xo 3.3.1xo Yes
Operating System cisco ios_xe_3.3xo 3.3.2xo Yes
Operating System cisco ios_xe_3.4sg 3.4.0sg Yes
Operating System cisco ios_xe_3.4sg 3.4.1sg Yes
Operating System cisco ios_xe_3.4sg 3.4.2sg Yes
Operating System cisco ios_xe_3.4sg 3.4.3sg Yes
Operating System cisco ios_xe_3.4sg 3.4.4sg Yes
Operating System cisco ios_xe_3.4sg 3.4.5sg Yes
Operating System cisco ios_xe_3.4sg 3.4.6sg Yes
Operating System cisco ios_xe_3.4sg 3.4.7sg Yes

References

How SecUtils Interprets This CVE

SecUtils normalizes and enriches National Vulnerability Database (NVD) records by standardizing vendor and product identifiers, aggregating vulnerability metadata from both NVD and MITRE sources, and providing structured context for security teams. For cisco's affected products, we extract Common Platform Enumeration (CPE) data, Common Weakness Enumeration (CWE) classifications, CVSS severity metrics, and reference data to enable rapid vulnerability prioritization and asset correlation. This record contains no exploit code, proof-of-concept instructions, or attack methodologies—only defensive intelligence necessary for patch management, risk assessment, and security operations.