CVE Feed

    Dashboard / CVE / CVE-2016-6457

    CVE-2016-6457

    A vulnerability in the Cisco Nexus 9000 Series Platform Leaf Switches for Application Centric Infrastructure (ACI) could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on the affected device. This vulnerability affects Cisco Nexus 9000 Series Leaf Switches (TOR) - ACI Mode and Cisco Application Policy Infrastructure Controller (APIC). More Information: CSCuy93241. Known Affected Releases: 11.2(2x) 11.2(3x) 11.3(1x) 11.3(2x) 12.0(1x). Known Fixed Releases: 11.2(2i) 11.2(2j) 11.2(3f) 11.2(3g) 11.2(3h) 11.2(3l) 11.3(0.236) 11.3(1j) 11.3(2i) 11.3(2j) 12.0(1r).

    Published:Nov 19, 2016
    Last Modified:Apr 12, 2025
    EPS:Nov 19, 2016
    EPSS Score:0.00361
    CVSS Score:6.5

    Affected Products

    Vendor
    Cisco
    Product
    Application Policy Infrastructure Controller
    Vendor
    Cisco
    Product
    Nexus 92160yc-x
    Vendor
    Cisco
    Product
    Nexus 92304qc
    Vendor
    Cisco
    Product
    Nexus 9236c
    Vendor
    Cisco
    Product
    Nexus 9272q
    Vendor
    Cisco
    Product
    Nexus 93108tc-ex
    Vendor
    Cisco
    Product
    Nexus 93120tx
    Vendor
    Cisco
    Product
    Nexus 93128tx
    Vendor
    Cisco
    Product
    Nexus 93180yc-ex
    Vendor
    Cisco
    Product
    Nexus 9332pq
    Vendor
    Cisco
    Product
    Nexus 9336pq Aci Spine
    Vendor
    Cisco
    Product
    Nexus 9372px
    Vendor
    Cisco
    Product
    Nexus 9372tx
    Vendor
    Cisco
    Product
    Nexus 9396px
    Vendor
    Cisco
    Product
    Nexus 9396tx
    Vendor
    Cisco
    Product
    Nexus 9504
    Vendor
    Cisco
    Product
    Nexus 9508
    Vendor
    Cisco
    Product
    Nexus 9516
    Vendor
    Cisco
    Product
    Nx-os

    Exploits

    No exploit reference

    Related CVEs

    CVE-2025-20119 (CVSS 6) — A vulnerability in the system file permission handling of Cisco APIC could allow an authenticated, local attac…
    CVE-2025-20118 (CVSS 4.4) — A vulnerability in the implementation of the internal system processes of Cisco APIC could allow an authentica…
    CVE-2025-20117 (CVSS 5.1) — A vulnerability in the CLI of Cisco APIC could allow an authenticated, local attacker to execute arbitrary com…
    CVE-2025-20116 (CVSS 4.8) — A vulnerability in the web UI of Cisco APIC could allow an authenticated, remote attacker to perform a stored …
    CVE-2024-20478 (CVSS 6.5) — A vulnerability in the software upgrade component of Cisco Application Policy Infrastructure Controller (APIC)…
    CVE-2024-20279 (CVSS 4.3) — A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Co…
    CVE-2023-20230 (CVSS 5.4) — A vulnerability in the restricted security domain implementation of Cisco Application Policy Infrastructure Co…
    CVE-2023-20011 (CVSS 8.8) — A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller (A…
    CVE-2021-1582 (CVSS 5.4) — A vulnerability in the web UI of Cisco Application Policy Infrastructure Controller (APIC) or Cisco Cloud APIC…
    CVE-2021-1581 (CVSS 6.5) — Multiple vulnerabilities in the web UI and API endpoints of Cisco Application Policy Infrastructure Controller…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High