{"id": "CVE-2016-6473", "bulletinFamily": "NVD", "title": "CVE-2016-6473", "description": "A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.2(3)E. Known Fixed Releases: 12.2(50)SE4 12.2(50)SE5 12.2(50)SQ5 12.2(50)SQ6 12.2(50)SQ7 12.2(52)EY4 12.2(52)SE1 12.2(53)EX 12.2(53)SE 12.2(53)SE1 12.2(53)SE2 12.2(53)SG10 12.2(53)SG11 12.2(53)SG2 12.2(53)SG9 12.2(54)SG1 12.2(55)EX3 12.2(55)SE 12.2(55)SE1 12.2(55)SE10 12.2(55)SE2 12.2(55)SE3 12.2(55)SE4 12.2(55)SE5 12.2(55)SE6 12.2(55)SE7 12.2(55)SE8 12.2(55)SE9 12.2(58)EZ 12.2(58)SE1 12.2(58)SE2 12.2(60)EZ 12.2(60)EZ1 12.2(60)EZ2 12.2(60)EZ3 12.2(60)EZ4 12.2(60)EZ5 12.2(60)EZ6 12.2(60)EZ7 12.2(60)EZ8 15.0(1)EY2 15.0(1)SE 15.0(1)SE2 15.0(1)SE3 15.0(2)EA 15.0(2)EB 15.0(2)EC 15.0(2)ED 15.0(2)EH 15.0(2)EJ 15.0(2)EJ1 15.0(2)EK1 15.0(2)EX 15.0(2)EX1 15.0(2)EX3 15.0(2)EX4 15.0(2)EX5 15.0(2)EY 15.0(2)EY1 15.0(2)EY2 15.0(2)EZ 15.0(2)SE 15.0(2)SE1 15.0(2)SE2 15.0(2)SE3 15.0(2)SE4 15.0(2)SE5 15.0(2)SE6 15.0(2)SE7 15.0(2)SE9 15.0(2)SG10 15.0(2)SG3 15.0(2)SG6 15.0(2)SG7 15.0(2)SG8 15.0(2)SG9 15.0(2a)EX5 15.1(2)SG 15.1(2)SG1 15.1(2)SG2 15.1(2)SG3 15.1(2)SG4 15.1(2)SG5 15.1(2)SG6 15.2(1)E 15.2(1)E1 15.2(1)E2 15.2(1)E3 15.2(1)EY 15.2(2)E 15.2(2)E3 15.2(2b)E.", "published": "2016-12-14T00:59:00", "modified": "2017-01-06T19:59:00", "cvss": {"score": 6.1, "vector": "AV:A/AC:L/Au:N/C:N/I:N/A:C"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2016-6473", "reporter": "cve@mitre.org", "references": ["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios", "http://www.securityfocus.com/bid/94815"], "cvelist": ["CVE-2016-6473"], "type": "cve", "lastseen": "2019-05-29T18:15:39", "history": [], "edition": 1, "hashmap": [{"key": "affectedSoftware", "hash": "de7c2f8b71fc6c0b9c49f31e45cff616"}, {"key": "bulletinFamily", "hash": "601892ece72be3be2f57266ca2354792"}, {"key": "cpe", "hash": "0181032c631496474cdecd104c8bea33"}, {"key": "cpe23", "hash": "79907cc3819120b86a0f67a053df807a"}, {"key": "cvelist", "hash": "7a04514419c65ec0477fb73583effccf"}, {"key": "cvss", "hash": "f6e43ea25f0e574024bb280392c7e9dc"}, {"key": "cvss2", "hash": "4d5ba1c6c304ff2c92716453e5594d0c"}, {"key": "cvss3", "hash": "3a91c9a140d1667e99780b6d5c5ebaad"}, {"key": "cwe", "hash": "77ded46825da5baf9e1170d674c99f9c"}, {"key": "description", "hash": "bbb75f1ac0312e4a4f86356149915494"}, {"key": "href", "hash": "057a42671ec3ef9cdaf0831c801b9a05"}, {"key": "modified", "hash": "4815126ae608fdded7a82d4869b80ebf"}, {"key": "published", "hash": "c62143f8f3cdeeecde6fe2e33396fea5"}, {"key": "references", "hash": "d4d52a45cdfda74ffd47724597bbd1c4"}, {"key": "reporter", "hash": "444c2b4dda4a55437faa8bef1a141e84"}, {"key": "title", "hash": "c190fab576ff87c5ba899d3fe88c5610"}, {"key": "type", "hash": "1716b5fcbb7121af74efdc153d0166c5"}], "hash": "dae4b89e59eb6e72fd9227f0d372a7571762aabe5a872f4af64e4d25218c5fb9", "viewCount": 0, "enchantments": {"score": {"value": 3.6, "vector": "NONE", "modified": "2019-05-29T18:15:39"}, "dependencies": {"references": [{"type": "openvas", "idList": ["OPENVAS:1361412562310106446"]}, {"type": "cisco", "idList": ["CISCO-SA-20161207-IOS"]}], "modified": "2019-05-29T18:15:39"}, "vulnersScore": 3.6}, "objectVersion": "1.3", "cpe": ["cpe:/o:cisco:ios:15.2\\(2\\)e1", "cpe:/o:cisco:ios:15.2\\(2\\)e2", "cpe:/a:cisco:ios:15.2(3a)e", "cpe:/a:cisco:ios:15.2(3)e", "cpe:/a:cisco:ios:15.2(2)e1", "cpe:/a:cisco:ios:15.2(2)e2", "cpe:/o:cisco:ios:15.2\\(2a\\)e1", "cpe:/o:cisco:ios:15.2\\(3a\\)e", "cpe:/a:cisco:ios:15.2(2a)e1", "cpe:/o:cisco:ios:15.0\\(2\\)se8", "cpe:/o:cisco:ios:15.2\\(3\\)e", "cpe:/a:cisco:ios:15.2(3)e1", "cpe:/o:cisco:ios:15.2\\(3\\)e1", "cpe:/a:cisco:ios:15.0(2)se8"], "affectedSoftware": [{"name": "cisco ios", "operator": "eq", "version": "15.2(2)e2"}, {"name": "cisco ios", "operator": "eq", "version": "15.0(2)se8"}, {"name": "cisco ios", "operator": "eq", "version": "15.2(3)e"}, {"name": "cisco ios", "operator": "eq", "version": "15.2(3)e1"}, {"name": "cisco ios", "operator": "eq", "version": "15.2(2a)e1"}, {"name": "cisco ios", "operator": "eq", "version": "15.2(3a)e"}, {"name": "cisco ios", "operator": "eq", "version": "15.2(2)e1"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "ADJACENT_NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 6.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:A/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 6.5, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "MEDIUM", "userInteractionRequired": false}, "cvss3": {"cvssV3": {"attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6}, "cpe23": ["cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.2\\(3a\\)e:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.0\\(2\\)se8:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.2\\(3\\)e:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e1:*:*:*:*:*:*:*", "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*"], "cwe": ["CWE-74", "CWE-399"]}

{"cisco": [{"lastseen": "2019-05-29T15:32:25", "bulletinFamily": "software", "description": "A vulnerability in Cisco IOS on Catalysts Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm.\n\nThe vulnerability occurs because the software forwards Layer 2 frames that should be consumed by the first hop. An attacker could exploit this vulnerability by injecting the Layer 2 frame into the network segment. An exploit could allow the attacker to cause a Layer 2 network storm and impact the availability of the switches.\n\nThere are workarounds that address this vulnerability.\n\nThis advisory is available at the following link:\n\nhttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios[\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios\"]", "modified": "2016-12-06T14:59:39", "published": "2016-12-07T16:00:00", "id": "CISCO-SA-20161207-IOS", "href": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios", "type": "cisco", "title": "Cisco IOS Frame Forwarding Denial of Service Vulnerability", "cvss": {"score": 6.1, "vector": "AV:A/AC:L/Au:N/C:N/I:N/A:C"}}], "openvas": [{"lastseen": "2019-10-09T15:19:58", "bulletinFamily": "scanner", "description": "A vulnerability in Cisco IOS on Catalysts Switches and Nexus 9300 Series\nSwitches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm.", "modified": "2019-10-09T00:00:00", "published": "2016-12-08T00:00:00", "id": "OPENVAS:1361412562310106446", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310106446", "title": "Cisco IOS Frame Forwarding Denial of Service Vulnerability", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Cisco IOS Frame Forwarding Denial of Service Vulnerability\n#\n# Authors:\n# Christian Kuersteiner <christian.kuersteiner@greenbone.net>\n#\n# Copyright:\n# Copyright (c) 2016 Greenbone Networks GmbH\n#\n# This program is free software; you can redistribute it and/or\n# modify it under the terms of the GNU General Public License\n# as published by the Free Software Foundation; either version 2\n# of the License, or (at your option) any later version.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nCPE = \"cpe:/o:cisco:ios\";\n\nif (description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.106446\");\n script_cve_id(\"CVE-2016-6473\");\n script_tag(name:\"cvss_base\", value:\"6.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:A/AC:L/Au:N/C:N/I:N/A:C\");\n script_version(\"2019-10-09T06:43:33+0000\");\n\n script_name(\"Cisco IOS Frame Forwarding Denial of Service Vulnerability\");\n\n script_xref(name:\"URL\", value:\"http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161207-ios\");\n\n script_tag(name:\"vuldetect\", value:\"Checks if a vulnerable version is present on the target host.\");\n\n script_tag(name:\"solution\", value:\"See the referenced vendor advisory for a solution.\");\n\n script_tag(name:\"summary\", value:\"A vulnerability in Cisco IOS on Catalysts Switches and Nexus 9300 Series\nSwitches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm.\");\n\n script_tag(name:\"insight\", value:\"The vulnerability occurs because the software forwards Layer 2 frames that\nshould be consumed by the first hop. An attacker could exploit this vulnerability by injecting the Layer 2 frame\ninto the network segment.\");\n\n script_tag(name:\"impact\", value:\"An exploit could allow the attacker to cause a Layer 2 network storm and\nimpact the availability of the switches.\");\n\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n\n script_tag(name:\"last_modification\", value:\"2019-10-09 06:43:33 +0000 (Wed, 09 Oct 2019)\");\n script_tag(name:\"creation_date\", value:\"2016-12-08 14:16:20 +0700 (Thu, 08 Dec 2016)\");\n script_category(ACT_GATHER_INFO);\n script_family(\"CISCO\");\n script_copyright(\"This script is Copyright (C) 2016 Greenbone Networks GmbH\");\n script_dependencies(\"gb_ssh_cisco_ios_get_version.nasl\");\n script_mandatory_keys(\"cisco_ios/version\");\n exit(0);\n}\n\ninclude(\"host_details.inc\");\ninclude(\"version_func.inc\");\n\nif( ! version = get_app_version( cpe:CPE ) ) exit( 0 );\n\naffected = make_list(\n '15.0(2)SE8',\n '15.2(3)E',\n '15.2(2)E1',\n '15.2(3)E1',\n '15.2(2)E2',\n '15.2(2a)E1',\n '15.2(3a)E' );\n\nforeach af ( affected )\n{\n if( version == af )\n {\n report = report_fixed_ver( installed_version:version, fixed_version: \"See advisory\" );\n security_message( port:0, data:report );\n exit( 0 );\n }\n}\n\nexit( 99 );\n\n", "cvss": {"score": 6.1, "vector": "AV:A/AC:L/Au:N/C:N/I:N/A:C"}}]}