CVE-2016-6422

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-10-06 · updated 2026-06-17
Weakness: CWE-20

Description

Cisco IOS 12.2(33)SXJ9 on Supervisor Engine 32 and 720 modules for 6500 and 7600 devices mishandles certain operators, flags, and keywords in TCAM share ACLs, which allows remote attackers to bypass intended access restrictions by sending packets that should have been recognized by a filter, aka Bug ID CSCuy64806.

Affected products

Cisco IOS: 12.2(33)sxj9

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-catalyst
http://www.securityfocus.com/bid/93404
http://www.securitytracker.com/id/1036954
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-catalyst
http://www.securityfocus.com/bid/93404
http://www.securitytracker.com/id/1036954

Get alerted when CVE-2016-6422 or the next vulnerability affects your stack