CVE-2016-1361
Estado: ModificadaMedia (5.3)—
Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900.
CVSS
- Versión: 3.0
- Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.3
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.75%
- Percentil entre todas las CVEs puntuadas: 53
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-399
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2016-1361",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.2,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.3,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.6
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-03-12T02:59:04.910",
"references": [
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1035314",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1035314",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900."
},
{
"lang": "es",
"value": "Cisco IOS XR hasta la versión 4.3.2 en dispositivos Gigabit Switch Router (GSR) 12000 no verifica adecuadamente para una cabecera Bidirectional Forwarding Detection (BFD) en un paquete UDP, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio de tarjeta en línea) a través de un paquete manipulado, también conocida como Bug ID CSCuw56900."
}
],
"lastModified": "2026-06-17T00:41:46.933",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E1811B6-737F-407C-8AB0-63E6B031D5AD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81797938-F953-42BE-B287-AA48B9860AF6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92AED038-C73F-4499-B064-F01D80DB0C64"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5F15240-6323-4766-801A-D887F3EA8A6B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F497A05C-2FC5-427D-8036-2476ACA956C0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46D1A634-D39C-4305-8915-4AA289FB68EE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21BAB799-3150-46D8-AEA3-9FCC73203221"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99042285-94AC-4C57-8EAA-EE63C678A94A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B9A223A-7A0A-4E31-B8A1-C809373A799D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ECAB9C3-9248-4663-ABAE-31FFC969EF3A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10596213-9D2B-48A3-A733-744D41E90419"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F57421B-F54C-4C50-8B25-AF787E541C5A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A865225-6AEA-430D-8DB6-E70F7ED5E547"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BFD77AF-358B-4385-BA8E-1BE9AC166825"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E593EF3-133A-4E15-9B86-6B451F5C0159"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BB49EB2-2D99-4C45-80B7-48299A1EBF30"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB6ABB63-E2D2-42F7-B648-BF6002D1C05E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58FEC4F2-040A-4D23-8FE0-BC55020766BB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82520CBD-F42F-4E2D-9D36-878737779690"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DB87708-B088-47F7-BABA-2CD456766897"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC1194B-56AC-4850-88B0-5EDFF92FABFC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "074571B4-65EF-451A-89DC-0797F6E4BFEA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D909532E-85F5-4201-8BFF-561A21998D97"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73D962D3-563F-4CDE-B51D-224D7995FBC9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:xr_12404:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "54D5CEDE-699C-496E-95CF-BEF9BCF55981"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12406:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C32030A-3F87-4F01-AA86-493C8F93F777"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12410:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5CEC5B1-0595-4163-A458-D4FF29F4E117"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12416:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DAD5FA50-0753-43EA-8D07-8F5D719E394D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}