CVE-2016-1370

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-06-03 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco Prime Network Analysis Module (NAM) before 6.2(1-b) miscalculates IPv6 payload lengths, which allows remote attackers to cause a denial of service (mond process crash and monitoring outage) via crafted IPv6 packets, aka Bug ID CSCuy37324.

Affected products

Cisco Network Analysis Module Software: 4.0.0, 4.1.0

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3
http://www.securitytracker.com/id/1036016
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160601-prime3
http://www.securitytracker.com/id/1036016

Get alerted when CVE-2016-1370 or the next vulnerability affects your stack