CVE Feed

    Dashboard / CVE / CVE-2016-6467

    CVE-2016-6467

    A vulnerability in IPv6 packet fragment reassembly of StarOS for Cisco Aggregation Services Router (ASR) 5000 Series Switch could allow an unauthenticated, remote attacker to cause an unexpected reload of the Network Processing Unit (NPU) process. More Information: CSCva84552. Known Affected Releases: 20.0.0 21.0.0 21.0.M0.64702. Known Fixed Releases: 21.0.0 21.0.0.65256 21.0.M0.64970 21.0.V0.65150 21.1.A0.64973 21.1.PP0.65270 21.1.R0.65130 21.1.R0.65135 21.1.VC0.65203.

    Published:Dec 14, 2016
    Last Modified:Apr 12, 2025
    EPS:Dec 14, 2016
    EPSS Score:0.01792
    CVSS Score:7.5

    Affected Products

    Vendor
    Cisco
    Product
    Asr 5000
    Vendor
    Cisco
    Product
    Asr 5000 Series Software

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2023-20046 (CVSS 8.8) — A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authentica…
    CVE-2023-20051 (CVSS 5.8) — A vulnerability in the Vector Packet Processor (VPP) of Cisco Packet Data Network Gateway (PGW) could allow an…
    CVE-2022-20919 (CVSS 8.6) — A vulnerability in the processing of malformed Common Industrial Protocol (CIP) packets that are sent to Cisco…
    CVE-2021-1540 (CVSS 8.1) — Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow a…
    CVE-2021-1539 (CVSS 8.1) — Multiple vulnerabilities in the authorization process of Cisco ASR 5000 Series Software (StarOS) could allow a…
    CVE-2021-1353 (CVSS 5.8) — A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker …
    CVE-2021-1145 (CVSS 6.5) — A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an auth…
    CVE-2020-3244 (CVSS 5.3) — A vulnerability in the Enhanced Charging Service (ECS) functionality of Cisco ASR 5000 Series Aggregation Serv…
    CVE-2019-16026 (CVSS 5.9) — A vulnerability in the implementation of the Stream Control Transmission Protocol (SCTP) on Cisco Mobility Man…
    CVE-2019-1869 (CVSS 8.6) — A vulnerability in the internal packet-processing functionality of the Cisco StarOS operating system running o…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High