CVE-2016-1361
Status: ModifiedMedium (5.3)—
Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900.
CVSS
- Version: 3.0
- Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- Base score: 5.3
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.75%
- Percentile among all scored CVEs: 53
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-399
References
Raw JSON (NVD)
Show
{
"id": "CVE-2016-1361",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 4.6,
"accessVector": "ADJACENT_NETWORK",
"vectorString": "AV:A/AC:H/Au:N/C:N/I:N/A:C",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "HIGH",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 6.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.2,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false
}
],
"cvssMetricV30": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.0",
"baseScore": 5.3,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.6
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2016-03-12T02:59:04.910",
"references": [
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1035314",
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160311-gsr",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1035314",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-399"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS XR through 4.3.2 on Gigabit Switch Router (GSR) 12000 devices does not properly check for a Bidirectional Forwarding Detection (BFD) header in a UDP packet, which allows remote attackers to cause a denial of service (line-card restart) via a crafted packet, aka Bug ID CSCuw56900."
},
{
"lang": "es",
"value": "Cisco IOS XR hasta la versión 4.3.2 en dispositivos Gigabit Switch Router (GSR) 12000 no verifica adecuadamente para una cabecera Bidirectional Forwarding Detection (BFD) en un paquete UDP, lo que permite a atacantes remotos provocar una denegación de servicio (reinicio de tarjeta en línea) a través de un paquete manipulado, también conocida como Bug ID CSCuw56900."
}
],
"lastModified": "2026-06-17T00:41:46.933",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E1811B6-737F-407C-8AB0-63E6B031D5AD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81797938-F953-42BE-B287-AA48B9860AF6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92AED038-C73F-4499-B064-F01D80DB0C64"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CB7A249B-AF69-47D0-B6DE-968B4CD0BA42"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C5F15240-6323-4766-801A-D887F3EA8A6B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D99DC1CF-78DC-4E59-98BA-DD84702D6467"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0B9FA754-E3D2-4D80-8F4B-41139973D9FC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F497A05C-2FC5-427D-8036-2476ACA956C0"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2252E7B0-9112-4E9E-8CF4-4EC53C630CFD"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1131A524-AA7A-4C94-9FFE-54546EA7D2CC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46D1A634-D39C-4305-8915-4AA289FB68EE"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "21BAB799-3150-46D8-AEA3-9FCC73203221"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "99042285-94AC-4C57-8EAA-EE63C678A94A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "96F48419-AF66-4B50-ACBF-9E38287A64FA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EBB71A24-AA6C-4BAD-BD37-5C191751C9DF"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A20B6A9-27B7-4F42-B88D-F4AACC9BC24D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.8.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9B9A223A-7A0A-4E31-B8A1-C809373A799D"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1ECAB9C3-9248-4663-ABAE-31FFC969EF3A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10596213-9D2B-48A3-A733-744D41E90419"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:3.9.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A07DCCD1-85D5-4ED2-B845-8C6EAC7E9D9B"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7F57421B-F54C-4C50-8B25-AF787E541C5A"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3A865225-6AEA-430D-8DB6-E70F7ED5E547"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "39F8B336-0DFA-41CE-9EFF-89A09BBDC6D6"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5BFD77AF-358B-4385-BA8E-1BE9AC166825"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8E593EF3-133A-4E15-9B86-6B451F5C0159"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BB49EB2-2D99-4C45-80B7-48299A1EBF30"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB6ABB63-E2D2-42F7-B648-BF6002D1C05E"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58FEC4F2-040A-4D23-8FE0-BC55020766BB"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82520CBD-F42F-4E2D-9D36-878737779690"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4DB87708-B088-47F7-BABA-2CD456766897"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AFC1194B-56AC-4850-88B0-5EDFF92FABFC"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "074571B4-65EF-451A-89DC-0797F6E4BFEA"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D909532E-85F5-4201-8BFF-561A21998D97"
},
{
"criteria": "cpe:2.3:o:cisco:ios_xr:4.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "73D962D3-563F-4CDE-B51D-224D7995FBC9"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:xr_12404:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "54D5CEDE-699C-496E-95CF-BEF9BCF55981"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12406:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4C32030A-3F87-4F01-AA86-493C8F93F777"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12410:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F5CEC5B1-0595-4163-A458-D4FF29F4E117"
},
{
"criteria": "cpe:2.3:h:cisco:xr_12416:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DAD5FA50-0753-43EA-8D07-8F5D719E394D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}