CVE-2016-1436

Published Jun 23, 2016

Last updated 8 years ago

Overview

Description: The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service (Session Manager process restart) via a crafted GTPv1 packet, aka Bug ID CSCuz46198.
Source: ykramarz@cisco.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 3.0

Type: Primary
Base score: 7.5
Impact score: 3.6
Exploitability score: 3.9
Vector string: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Severity: HIGH

CVSS 2.0

Type: Primary
Base score: 5
Impact score: 2.9
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:17.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB1AAF0E-D72B-4F76-BDEE-F4A5D52827BD"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:17.2.0.59184:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6564BD37-C0DC-4804-B892-ACDC40ABA30C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:17.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0798EBF4-3F40-4BF4-B1B0-E8DB62CD0752"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:17.7.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FAAD7B1D-F05F-4C7A-A9C7-D7F3AA268BF2"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CD5F3E18-1B7C-42F8-8663-AAC6AE299BEC"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.0.0.57828:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EF930785-B365-4D87-BBDD-F1DD7E84F713"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.0.0.59167:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E1FDB9CE-8282-44CC-87D4-970463868E10"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.0.0.59211:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "423FC5E3-2B6A-468A-B3C0-BA15C7ED989B"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.0.l0.59219:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EAE388B-88F8-480B-8580-B64C9DD1E62B"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B14A1C6-B14A-453C-9368-A05D56F83100"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.1.0.59776:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "336BDB6D-0386-4668-BB27-6279172CB782"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.1.0.59780:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "66D23DD3-EF51-49B8-8E2A-95D11BCC3901"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.1_base:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7FAB6518-33BF-40A7-8179-CD84A78CBF3D"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E4CCB5CA-CB83-4900-8AC3-43355DA36A6C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4D300F74-79BD-4054-90F3-22FCD3E1FDA2"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "367EE318-4040-42C7-831C-747A71B7545C"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "27E59FC3-EC5C-43E9-8444-2CC1ADC052DA"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BF555599-94A2-4E5A-A487-75D67297BC2B"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4D26DF95-B1FB-4720-BAE0-33698CD5EB91"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "32EAC723-2922-40C2-8B5A-56B51B33DCE0"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA6188B2-D27E-4FBE-B5C3-BC439D5CC405"
          },
          {
            "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "87A4BA17-D3C2-4CB0-A1CA-F40D63A022FF"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References