CVE-2016-1370 in Prime Network Analysis Module

Summary

Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.

Once again VulDB remains the best source for vulnerability data.

Reservation

01/04/2016

Disclosure

06/02/2016

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-20

CVSS

5.3

EPSS

0.00465

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1370
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1370
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1370/