CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 78%
VendorProductVersion
ciscoios_xr
2.0.0
ciscoios_xr
3.0.0
ciscoios_xr
3.0.1
ciscoios_xr
3.2.0
ciscoios_xr
3.2.1
ciscoios_xr
3.2.2
ciscoios_xr
3.2.3
ciscoios_xr
3.2.4
ciscoios_xr
3.2.6
ciscoios_xr
3.2.50
ciscoios_xr
3.3.0
ciscoios_xr
3.3.1
ciscoios_xr
3.3.2
ciscoios_xr
3.3.3
ciscoios_xr
3.3.4
ciscoios_xr
3.4.0
ciscoios_xr
3.4.1
ciscoios_xr
3.4.2
ciscoios_xr
3.4.3
ciscoios_xr
3.5.0
ciscoios_xr
3.5.2
ciscoios_xr
3.5.3
ciscoios_xr
3.5.4
ciscoios_xr
3.6.0
ciscoios_xr
3.6.1
ciscoios_xr
3.6.2
ciscoios_xr
3.6.3
ciscoios_xr
3.6_base:_base
ciscoios_xr
3.7.0
ciscoios_xr
3.7.1
ciscoios_xr
3.7.2
ciscoios_xr
3.7.3
ciscoios_xr
3.7_base:_base
ciscoios_xr
3.8.0
ciscoios_xr
3.8.1
ciscoios_xr
3.8.2
ciscoios_xr
3.8.3
ciscoios_xr
3.8.4
ciscoios_xr
3.9.0
ciscoios_xr
3.9.1
ciscoios_xr
3.9.2
ciscoios_xr
3.9.3
ciscoios_xr
4.0.0
ciscoios_xr
4.0.1
ciscoios_xr
4.0.2
ciscoios_xr
4.0.3
ciscoios_xr
4.0.4
ciscoios_xr
4.0.11
ciscoios_xr
4.0_base:_base
ciscoios_xr
4.1.0
ciscoios_xr
4.1.1
ciscoios_xr
4.1.2
ciscoios_xr
4.1_base:_base
ciscoios_xr
4.2.0
ciscoios_xr
4.2.1
ciscoios_xr
4.2.2
ciscoios_xr
4.2.3
ciscoios_xr
4.2.4
ciscoios_xr
4.3.0
ciscoios_xr
4.3.1
ciscoios_xr
4.3.2
ciscoios_xr
4.3.3
ciscoios_xr
4.3.4
ciscoios_xr
5.0.0
ciscoios_xr
5.0.1
ciscoios_xr
5.0_base:_base
ciscoios_xr
5.1.0
ciscoios_xr
5.1.1.k9sec:k9sec
ciscoios_xr
5.1.2
ciscoios_xr
5.1.3
ciscoios_xr
5.2.0
ciscoios_xr
5.2.1
ciscoios_xr
5.2.2
ciscoios_xr
5.2.3
ciscoios_xr
5.2.4
ciscoios_xr
5.2.5
ciscoios_xr
5.3.0
ciscoios_xr
5.3.1
ciscoios_xr
5.3.2
𝑥
= Vulnerable software versions