CVE-2016-1347 - Vulnerability Details

Vendors	Products
Cisco	Ios

Link	Providers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f
http://www.securitytracker.com/id/1035380

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-03-23T00:00:00", "descriptions": [{"lang": "en", "value": "The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2016-11-30T18:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f"}, {"name": "1035380", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1035380"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2016-1347", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f"}, {"name": "1035380", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1035380"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:55:14.327Z"}, "title": "CVE Program Container", "references": [{"name": "20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f"}, {"name": "1035380", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1035380"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2016-1347", "datePublished": "2016-03-24T22:00:00", "dateReserved": "2016-01-04T00:00:00", "dateUpdated": "2024-08-05T22:55:14.327Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-03-23T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2016-11-30T18:57:01 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f (string)

}

1 : { »

name : 1035380 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1035380 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

ID : CVE-2016-1347 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability (string)

refsource : CISCO (string)

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f (string)

}

1 : { »

name : 1035380 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1035380 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:55:14.327Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20160323 Cisco IOS Software Wide Area Application Services Express Denial of Service Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f (string)

}

1 : { »

name : 1035380 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1035380 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2016-1347 (string)

datePublished : 2016-03-24T22:00:00 (string)

dateReserved : 2016-01-04T00:00:00 (string)

dateUpdated : 2024-08-05T22:55:14.327Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)gc2:*:*:*:*:*:*:*", "matchCriteriaId": "B082C941-CE02-440F-8DD7-87873504B964", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)m6:*:*:*:*:*:*:*", "matchCriteriaId": "B770E747-517E-42FE-9197-8E654F294B3A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb4:*:*:*:*:*:*:*", "matchCriteriaId": "1D6836A1-5F15-44E2-AA5E-4CD0DDDB9692", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb5:*:*:*:*:*:*:*", "matchCriteriaId": "B59E042B-9A4B-4959-9B6A-FBDF431EB3E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb5a:*:*:*:*:*:*:*", "matchCriteriaId": "1FBB1846-D09A-4F66-AD7F-45A2236D8839", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb6:*:*:*:*:*:*:*", "matchCriteriaId": "75A272B8-DC6C-4D40-9C21-FFBC6BDFE836", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb7:*:*:*:*:*:*:*", "matchCriteriaId": "064E2B27-4067-49EF-A95A-8BC49E05662E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb8:*:*:*:*:*:*:*", "matchCriteriaId": "4035C938-2BAB-43C1-8302-8F22D4D3D0DF", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.1\\(4\\)xb8a:*:*:*:*:*:*:*", "matchCriteriaId": "0CC3BEF0-8E19-4464-92B5-2C6521AE126C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)jaz1:*:*:*:*:*:*:*", "matchCriteriaId": "6D4358B9-F3DB-46AC-A3A8-114E25F676DA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.2\\(4\\)m7:*:*:*:*:*:*:*", "matchCriteriaId": "96FDDD94-40C9-47F0-9D43-0C0267F439C0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(1\\)t2:*:*:*:*:*:*:*", "matchCriteriaId": "4E6ED45F-4479-445D-8970-F90413C51B7A", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)jaa1:*:*:*:*:*:*:*", "matchCriteriaId": "EAE1AD0D-C3E9-488C-89CB-F2342CF6D5A0", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)m:*:*:*:*:*:*:*", "matchCriteriaId": "6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)m3:*:*:*:*:*:*:*", "matchCriteriaId": "9B828AA0-E0B2-4897-AF28-FC80B9FF81BA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)m4:*:*:*:*:*:*:*", "matchCriteriaId": "9279A96A-43B2-4FD4-97F0-DA331EACF918", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.3\\(3\\)m6:*:*:*:*:*:*:*", "matchCriteriaId": "7855CC38-5E3E-486D-9322-7BF0DC1FF623", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(1\\)t:*:*:*:*:*:*:*", "matchCriteriaId": "A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(1\\)t1:*:*:*:*:*:*:*", "matchCriteriaId": "C1EE552E-226C-46DE-9861-CB148AD8FB44", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(1\\)t2:*:*:*:*:*:*:*", "matchCriteriaId": "CAF02C8E-9BB2-4DC2-8BF1-932835191F09", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t:*:*:*:*:*:*:*", "matchCriteriaId": "74E1226B-46CF-4C82-911A-86C818A75DFA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t1:*:*:*:*:*:*:*", "matchCriteriaId": "100DA24F-464E-4273-83DF-6428D0ED6641", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t2:*:*:*:*:*:*:*", "matchCriteriaId": "063C0C47-25EB-4AA4-9332-8E43CD60FF39", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t3:*:*:*:*:*:*:*", "matchCriteriaId": "A6004A94-FF96-4A34-B3CC-D4B4E555CFB4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(2\\)t4:*:*:*:*:*:*:*", "matchCriteriaId": "02866AED-A1B4-4D89-A11F-27089EF935BE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m:*:*:*:*:*:*:*", "matchCriteriaId": "1C85BAAF-819B-40E7-9099-04AA8D9AB114", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m1:*:*:*:*:*:*:*", "matchCriteriaId": "ED684DB4-527A-4268-B197-4719B0178429", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m2:*:*:*:*:*:*:*", "matchCriteriaId": "88F41406-0F55-4D74-A4F6-4ABD5A803907", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.4\\(3\\)m3:*:*:*:*:*:*:*", "matchCriteriaId": "7082C083-7517-4CD4-BF95-CC7AF08D4053", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.5\\(2\\)t1:*:*:*:*:*:*:*", "matchCriteriaId": "0F5D3761-16C8-413A-89AD-C076B9B92FF1", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.5\\(2\\)t2:*:*:*:*:*:*:*", "matchCriteriaId": "F690BEC9-FAE9-4C02-9993-34BF14FA99EA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.5\\(2\\)t3:*:*:*:*:*:*:*", "matchCriteriaId": "2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:ios:15.5\\(3\\)m:*:*:*:*:*:*:*", "matchCriteriaId": "716EC9AA-0569-4FA7-A244-1A14FA15C5AD", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708."}, {"lang": "es", "value": "La implementaci\u00f3n de Wide Area Application Services (WAAS) Express en Cisco IOS 15.1 hasta la versi\u00f3n 15.5 permite a atacantes remotos causar una denegaci\u00f3n de servicio (recarga de dispositivo) a trav\u00e9s de un segmento TCP manipulado, tambi\u00e9n conocida como Bug ID CSCuq59708."}], "id": "CVE-2016-1347", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 7.8, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-03-24T22:59:00.077", "references": [{"source": "psirt@cisco.com", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f"}, {"source": "psirt@cisco.com", "tags": ["Broken Link"], "url": "http://www.securitytracker.com/id/1035380"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://www.securitytracker.com/id/1035380"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-399"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)gc2:*:*:*:*:*:*:* (string)

matchCriteriaId : B082C941-CE02-440F-8DD7-87873504B964 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)m6:*:*:*:*:*:*:* (string)

matchCriteriaId : B770E747-517E-42FE-9197-8E654F294B3A (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb4:*:*:*:*:*:*:* (string)

matchCriteriaId : 1D6836A1-5F15-44E2-AA5E-4CD0DDDB9692 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb5:*:*:*:*:*:*:* (string)

matchCriteriaId : B59E042B-9A4B-4959-9B6A-FBDF431EB3E7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb5a:*:*:*:*:*:*:* (string)

matchCriteriaId : 1FBB1846-D09A-4F66-AD7F-45A2236D8839 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb6:*:*:*:*:*:*:* (string)

matchCriteriaId : 75A272B8-DC6C-4D40-9C21-FFBC6BDFE836 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb7:*:*:*:*:*:*:* (string)

matchCriteriaId : 064E2B27-4067-49EF-A95A-8BC49E05662E (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb8:*:*:*:*:*:*:* (string)

matchCriteriaId : 4035C938-2BAB-43C1-8302-8F22D4D3D0DF (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:cisco:ios:15.1\(4\)xb8a:*:*:*:*:*:*:* (string)

matchCriteriaId : 0CC3BEF0-8E19-4464-92B5-2C6521AE126C (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:cisco:ios:15.2\(4\)jaz1:*:*:*:*:*:*:* (string)

matchCriteriaId : 6D4358B9-F3DB-46AC-A3A8-114E25F676DA (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:cisco:ios:15.2\(4\)m7:*:*:*:*:*:*:* (string)

matchCriteriaId : 96FDDD94-40C9-47F0-9D43-0C0267F439C0 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(1\)t2:*:*:*:*:*:*:* (string)

matchCriteriaId : 4E6ED45F-4479-445D-8970-F90413C51B7A (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(3\)jaa1:*:*:*:*:*:*:* (string)

matchCriteriaId : EAE1AD0D-C3E9-488C-89CB-F2342CF6D5A0 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(3\)m:*:*:*:*:*:*:* (string)

matchCriteriaId : 6E0A47B7-5AD3-4B4C-A2FD-4EE0381B3FCE (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(3\)m3:*:*:*:*:*:*:* (string)

matchCriteriaId : 9B828AA0-E0B2-4897-AF28-FC80B9FF81BA (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(3\)m4:*:*:*:*:*:*:* (string)

matchCriteriaId : 9279A96A-43B2-4FD4-97F0-DA331EACF918 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:cisco:ios:15.3\(3\)m6:*:*:*:*:*:*:* (string)

matchCriteriaId : 7855CC38-5E3E-486D-9322-7BF0DC1FF623 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(1\)t:*:*:*:*:*:*:* (string)

matchCriteriaId : A0B856BB-0FFE-4A92-9CE7-D71B6C611CD3 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(1\)t1:*:*:*:*:*:*:* (string)

matchCriteriaId : C1EE552E-226C-46DE-9861-CB148AD8FB44 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(1\)t2:*:*:*:*:*:*:* (string)

matchCriteriaId : CAF02C8E-9BB2-4DC2-8BF1-932835191F09 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(2\)t:*:*:*:*:*:*:* (string)

matchCriteriaId : 74E1226B-46CF-4C82-911A-86C818A75DFA (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(2\)t1:*:*:*:*:*:*:* (string)

matchCriteriaId : 100DA24F-464E-4273-83DF-6428D0ED6641 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(2\)t2:*:*:*:*:*:*:* (string)

matchCriteriaId : 063C0C47-25EB-4AA4-9332-8E43CD60FF39 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(2\)t3:*:*:*:*:*:*:* (string)

matchCriteriaId : A6004A94-FF96-4A34-B3CC-D4B4E555CFB4 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(2\)t4:*:*:*:*:*:*:* (string)

matchCriteriaId : 02866AED-A1B4-4D89-A11F-27089EF935BE (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(3\)m:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C85BAAF-819B-40E7-9099-04AA8D9AB114 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(3\)m1:*:*:*:*:*:*:* (string)

matchCriteriaId : ED684DB4-527A-4268-B197-4719B0178429 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(3\)m2:*:*:*:*:*:*:* (string)

matchCriteriaId : 88F41406-0F55-4D74-A4F6-4ABD5A803907 (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:cisco:ios:15.4\(3\)m3:*:*:*:*:*:*:* (string)

matchCriteriaId : 7082C083-7517-4CD4-BF95-CC7AF08D4053 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:o:cisco:ios:15.5\(2\)t1:*:*:*:*:*:*:* (string)

matchCriteriaId : 0F5D3761-16C8-413A-89AD-C076B9B92FF1 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:o:cisco:ios:15.5\(2\)t2:*:*:*:*:*:*:* (string)

matchCriteriaId : F690BEC9-FAE9-4C02-9993-34BF14FA99EA (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:o:cisco:ios:15.5\(2\)t3:*:*:*:*:*:*:* (string)

matchCriteriaId : 2BEA314F-8C89-4D6C-A6B6-3E9247A35B7E (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:o:cisco:ios:15.5\(3\)m:*:*:*:*:*:*:* (string)

matchCriteriaId : 716EC9AA-0569-4FA7-A244-1A14FA15C5AD (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : The Wide Area Application Services (WAAS) Express implementation in Cisco IOS 15.1 through 15.5 allows remote attackers to cause a denial of service (device reload) via a crafted TCP segment, aka Bug ID CSCuq59708. (string)

}

1 : { »

lang : es (string)

value : La implementación de Wide Area Application Services (WAAS) Express en Cisco IOS 15.1 hasta la versión 15.5 permite a atacantes remotos causar una denegación de servicio (recarga de dispositivo) a través de un segmento TCP manipulado, también conocida como Bug ID CSCuq59708. (string)

}

]

id : CVE-2016-1347 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 7.8 (number)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:N/C:N/I:N/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 6.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : NONE (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-03-24T22:59:00.077 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f (string)

}

1 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Broken Link (string)

]

url : http://www.securitytracker.com/id/1035380 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160323-l4f (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Broken Link (string)

]

url : http://www.securitytracker.com/id/1035380 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-399 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact None

Integrity Impact None

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object