CVE-2016-1384 in IOS

Summary

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservation: 01/03/2016
• Disclosure: 04/20/2016
• Moderation: VulDB entry created
• Entries: 1: VDB-82723
• CPE: ready
• CWE: CWE-264 (Confirmed)
• CVSS: 6.4
• EPSS: 0.00161
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-1384
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-1384
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-1384/