Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2016-6466
HistoryNov 19, 2016 - 3:03 a.m.

CVE-2016-6466

2016-11-1903:03:08
CWE-399
[email protected]
web.nvd.nist.gov
4

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

77.8%

JSON

A vulnerability in the IPsec component of StarOS for Cisco ASR 5000 Series routers could allow an unauthenticated, remote attacker to terminate all active IPsec VPN tunnels and prevent new tunnels from establishing, resulting in a denial of service (DoS) condition. This vulnerability affects the following Cisco products: Cisco ASR 5000/5500 Series routers, Cisco Virtualized Packet Core (VPC). More Information: CSCva13631. Known Affected Releases: 20.0.0 20.1.0 20.2.0 20.2.3 20.2.v1 21.0.0 21.0.M0.64246. Known Fixed Releases: 20.2.3 20.2.3.65026 20.2.a4.65307 20.2.v1 20.2.v1.65353 20.3.M0.65037 20.3.T0.65043 21.0.0 21.0.0.65256 21.0.M0.64595 21.0.M0.64860 21.0.M0.65140 21.0.V0.65052 21.0.V0.65150 21.0.V0.65366 21.0.VC0.64639 21.1.A0.64861 21.1.A0.65145 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.R0.65154 21.1.VC0.64898 21.1.VC0.65203 21.2.A0.65147.

Affected configurations

Nvd
Node
ciscoasr_5000_series_softwareMatch20.0.0
OR
ciscoasr_5000_series_softwareMatch20.0.2.3
OR
ciscoasr_5000_series_softwareMatch20.0.2.v1
OR
ciscovirtualized_packet_coreMatch20.0_base
VendorProductVersionCPE
ciscoasr_5000_series_software20.0.0cpe:2.3:a:cisco:asr_5000_series_software:20.0.0:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.0.2.3cpe:2.3:a:cisco:asr_5000_series_software:20.0.2.3:*:*:*:*:*:*:*
ciscoasr_5000_series_software20.0.2.v1cpe:2.3:a:cisco:asr_5000_series_software:20.0.2.v1:*:*:*:*:*:*:*
ciscovirtualized_packet_core20.0_basecpe:2.3:a:cisco:virtualized_packet_core:20.0_base:*:*:*:*:*:*:*

Related

cvelist 1
nessus 1
cve 1
cisco 1
prion 1
cvelist
cvelist
CVE-2016-6466
2016-11-19 02:45:00
nessus
nessus
Cisco ASR 5000 Series ipsecmgr Service DoS (cisco-sa-20161116-asr)
2016-12-05 00:00:00
cve
cve
CVE-2016-6466
2016-11-19 03:03:08
cisco
cisco
Cisco ASR 5000 Series ipsecmgr Service Denial of Service Vulnerability
2016-11-16 16:00:00
prion
prion
Race condition
2016-11-19 03:03:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.006

Percentile

77.8%

JSON
Related for NVD:CVE-2016-6466
cvelist1nessus1cve1cisco1prion1