CVE-2016-1349
The Smart Install client implementation in Cisco IOS 12.2, 15.0, and 15.2 and IOS XE 3.2 through 3.7 allows remote attackers to cause a denial of service (device reload) via crafted image list parameters in a Smart Install packet, aka Bug ID CSCuv45410.
- Score
- CVSS 3.0 7.5 High
- Status
- Modified - psirt@cisco.com
- Published
- 2016-03-26
- Last modified
- 2024-08-05
- Weaknesses
- CWE-399
Affected products
- Ios Xe (Cisco)
- Core I5-9400f Firmware (Intel)
- Jr6150 Firmware (Netgear)
- X14j Firmware (Samsung)
- Opensolaris (Sun)
- Gs1900-10hp Firmware (Zyxel)
- Keymouse Firmware (Zzinc)
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-smi
- http://www.securitytracker.com/id/1035385
