CVE-2016-1378

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-14 · updated 2026-06-17
Weakness: CWE-200

Description

Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591.

Affected products

Cisco IOS: 15.1(1)sg, 15.1(1)sg1, 15.1(1)sg2, 15.1(1)sy, 15.1(1)sy1, 15.1(1)sy2 (+22)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms
http://www.securitytracker.com/id/1035566
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160413-nms
http://www.securitytracker.com/id/1035566

Get alerted when CVE-2016-1378 or the next vulnerability affects your stack