CVE-2016-1350

High

Description

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.

SeverityHigh
CVSS7.5
Exploit probability—
ProductCisco Ios Xe
PublishedMar 26, 2016
First seenMar 26, 2016

How to fix

Update
  • lenovo thinkcentre_e75s_firmwarem16kt61a or later
  • zyxel gs1900-10hp_firmware2.50\(aazi.0\)c0 or later

Affected products

ProductAffected versionsFixed in
cisco ios_xe3.8.0s, 3.8.1s, 3.8.2s, 3.9.0as, 3.9.0s, 3.9.1as, 3.9.1s, 3.9.2s, 3.10.0s, 3.10.1s, 3.10.1xbs, 3.10.2s, 3.11.0s—
lenovo thinkcentre_e75s_firmwarev < m16kt61am16kt61a
samsung x14j_firmwaret-ms14jakucb-1102.5—
sun opensolarissnv_124—
zyxel gs1900-10hp_firmwarev < 2.50\(aazi.0\)c02.50\(aazi.0\)c0
zzinc keymouse_firmware3.08—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.