CVE-2016-1453 - Vulnerability Details

Vendors	Products
Cisco	Nx-os

Link	Providers
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv
http://www.securityfocus.com/bid/93409
http://www.securitytracker.com/id/1036946

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2016-10-05T00:00:00", "descriptions": [{"lang": "en", "value": "Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-29T09:57:01", "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco"}, "references": [{"name": "20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv"}, {"name": "93409", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/93409"}, {"name": "1036946", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id/1036946"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@cisco.com", "ID": "CVE-2016-1453", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability", "refsource": "CISCO", "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv"}, {"name": "93409", "refsource": "BID", "url": "http://www.securityfocus.com/bid/93409"}, {"name": "1036946", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id/1036946"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T22:55:14.465Z"}, "title": "CVE Program Container", "references": [{"name": "20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability", "tags": ["vendor-advisory", "x_refsource_CISCO", "x_transferred"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv"}, {"name": "93409", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/93409"}, {"name": "1036946", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id/1036946"}]}]}, "cveMetadata": {"assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "assignerShortName": "cisco", "cveId": "CVE-2016-1453", "datePublished": "2016-10-06T10:00:00", "dateReserved": "2016-01-04T00:00:00", "dateUpdated": "2024-08-05T22:55:14.465Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : n/a (string)

vendor : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2016-10-05T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : n/a (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2017-07-29T09:57:01 (string)

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

}

references : [ »

0 : { »

name : 20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv (string)

}

1 : { »

name : 93409 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

]

url : http://www.securityfocus.com/bid/93409 (string)

}

2 : { »

name : 1036946 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

]

url : http://www.securitytracker.com/id/1036946 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : psirt@cisco.com (string)

ID : CVE-2016-1453 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : n/a (string)

version : { »

version_data : [ »

0 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : n/a (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : n/a (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : 20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability (string)

refsource : CISCO (string)

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv (string)

}

1 : { »

name : 93409 (string)

refsource : BID (string)

url : http://www.securityfocus.com/bid/93409 (string)

}

2 : { »

name : 1036946 (string)

refsource : SECTRACK (string)

url : http://www.securitytracker.com/id/1036946 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-05T22:55:14.465Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

name : 20161005 Cisco Nexus 7000 and 7700 Series Switches Overlay Transport Virtualization Buffer Overflow Vulnerability (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_refsource_CISCO (string)

2 : x_transferred (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv (string)

}

1 : { »

name : 93409 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_BID (string)

2 : x_transferred (string)

]

url : http://www.securityfocus.com/bid/93409 (string)

}

2 : { »

name : 1036946 (string)

tags : [ »

0 : vdb-entry (string)

1 : x_refsource_SECTRACK (string)

2 : x_transferred (string)

]

url : http://www.securitytracker.com/id/1036946 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

assignerShortName : cisco (string)

cveId : CVE-2016-1453 (string)

datePublished : 2016-10-06T10:00:00 (string)

dateReserved : 2016-01-04T00:00:00 (string)

dateUpdated : 2024-08-05T22:55:14.465Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "DA1702F4-816E-4045-80B6-2BC71DC344F6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "C1AC8BC8-638A-4F73-A64B-B490675AA1A4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "7F128DC9-C4CA-4547-B6C8-8E83A8C5F6C8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.1.\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "99FB6C32-CD16-41E9-AB42-A294424266DB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "7EE1586F-E01C-4C4F-8284-1B1FE5370343", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "891D883E-8263-42B2-A978-49F6AEF4CD49", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(6\\):*:*:*:*:*:*:*", "matchCriteriaId": "9C059CCD-1BE1-4675-8388-0DB219C04E45", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2\\(8\\):*:*:*:*:*:*:*", "matchCriteriaId": "67829CF9-FDCB-4A17-9241-1B48A38B1A74", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:4.2.\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "C0476865-D306-47B7-A84A-C163A316D9DE", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "C6753978-267E-4398-A1F7-96C37B5C8600", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "16131960-37FE-4154-A82C-E3249B066DC4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.0\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "7B3296D4-DA94-4E41-BAAF-CEC0E84BB498", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "9B582362-FCFB-4D94-9C0E-2B7FD3F5340E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(1a\\):*:*:*:*:*:*:*", "matchCriteriaId": "93FF6E77-B7C2-4CBB-A8FE-1D6218BA330C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "5CAF2ADA-2C84-44EB-8893-0AB612AFF68F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "B6D70623-8F98-44CA-A589-B93B167F88EA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "10AE58DE-C708-4C15-B2C4-2366F4378344", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.1\\(6\\):*:*:*:*:*:*:*", "matchCriteriaId": "80510B23-1F02-4FE0-BF3D-E2CD2A5D5B2F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "5F179FBC-22BE-4C44-AAE0-866F1D6B1270", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(3a\\):*:*:*:*:*:*:*", "matchCriteriaId": "0C628947-4A0E-4904-A6F7-745C3370A8F4", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "356B4143-5184-491B-9D10-19D6536366CD", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "C038896F-6DBC-4695-9DBE-A60F6C39AFFC", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(7\\):*:*:*:*:*:*:*", "matchCriteriaId": "9F2453F2-704F-48F7-8009-991BE0B49251", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:5.2\\(9\\):*:*:*:*:*:*:*", "matchCriteriaId": "E00B4AC8-1D27-4394-AF28-10785AEFC073", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "48926DA6-2020-4D4F-AD12-555163C6C352", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "161C5BDB-CD50-40C7-B972-A1B650607338", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "7A0E6C0C-B88D-4085-AA28-0EA8CD1AB419", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.0\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "A967FB72-BCEB-4A76-A322-DDB0C4094E7C", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(1\\):*:*:*:*:*:*:*", "matchCriteriaId": "C6F882AB-C25D-477F-96BF-7001BB77B955", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "35E48EE6-C498-4E13-AC5E-28F6B4391725", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(3\\):*:*:*:*:*:*:*", "matchCriteriaId": "A3B41075-01D1-4832-A025-07A378F2A5E6", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(4\\):*:*:*:*:*:*:*", "matchCriteriaId": "858E4134-643C-422C-8441-5372F4BC25D8", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(4a\\):*:*:*:*:*:*:*", "matchCriteriaId": "A12BFDB0-4B90-4EB6-9CBE-A7A33C57EA9E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.1\\(5\\):*:*:*:*:*:*:*", "matchCriteriaId": "3AB9928F-B632-4A06-8065-FFB85998D979", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(2\\):*:*:*:*:*:*:*", "matchCriteriaId": "2FDE8EF9-47CF-451D-9570-3D369D74D44F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(2a\\):*:*:*:*:*:*:*", "matchCriteriaId": "55A760CE-5E63-4A6B-8DA3-A473BC3900E3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(6\\):*:*:*:*:*:*:*", "matchCriteriaId": "0E738E86-B75F-48BF-9E76-C7DD470F3688", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(6b\\):*:*:*:*:*:*:*", "matchCriteriaId": "68C6090F-0B05-46F0-8A67-928FE1C36D5F", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(8\\):*:*:*:*:*:*:*", "matchCriteriaId": "FBD345BD-83EF-4913-A0F3-74E52AD76BBA", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(8a\\):*:*:*:*:*:*:*", "matchCriteriaId": "46B2B97B-DDB7-4208-BF1A-D10C8A075A14", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(8b\\):*:*:*:*:*:*:*", "matchCriteriaId": "317C8BE8-84DA-43D5-AE93-7E7DCDE6883E", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(10\\):*:*:*:*:*:*:*", "matchCriteriaId": "ED7B1216-4C4F-4A23-9474-23876649ABF3", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(12\\):*:*:*:*:*:*:*", "matchCriteriaId": "57892CBB-8C95-4E56-90F8-B77BBBDC03FB", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:6.2\\(14\\)s1:*:*:*:*:*:*:*", "matchCriteriaId": "BE8505B4-61A1-4E98-8E13-9F8BAF825E42", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(0.1\\):*:*:*:*:*:*:*", "matchCriteriaId": "185B1E14-1944-4BD2-AA45-0F5025EDDC84", "vulnerable": true}, {"criteria": "cpe:2.3:o:cisco:nx-os:base:*:*:*:*:*:*:*", "matchCriteriaId": "CFBAD221-BBD3-4BE6-974F-361C8E0FC6E2", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la funcionalidad Overlay Transport Virtualization (OTV) GRE en Cisco NX-OS 5.0 hasta la versi\u00f3n 7.3 en dispositivos Nexus 7000 y 7700 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de par\u00e1metros largos en una cabecera de paquete, vulnerabilidad tambi\u00e9n conocida como Bug ID CSCuy95701."}], "id": "CVE-2016-1453", "lastModified": "2025-04-12T10:46:40.837", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2016-10-06T10:59:02.693", "references": [{"source": "psirt@cisco.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv"}, {"source": "psirt@cisco.com", "tags": ["Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/93409"}, {"source": "psirt@cisco.com", "tags": ["Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036946"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/93409"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Not Applicable", "Third Party Advisory", "VDB Entry"], "url": "http://www.securitytracker.com/id/1036946"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : DA1702F4-816E-4045-80B6-2BC71DC344F6 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : C1AC8BC8-638A-4F73-A64B-B490675AA1A4 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7F128DC9-C4CA-4547-B6C8-8E83A8C5F6C8 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.1.\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 99FB6C32-CD16-41E9-AB42-A294424266DB (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7EE1586F-E01C-4C4F-8284-1B1FE5370343 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 891D883E-8263-42B2-A978-49F6AEF4CD49 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(6\):*:*:*:*:*:*:* (string)

matchCriteriaId : 9C059CCD-1BE1-4675-8388-0DB219C04E45 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2\(8\):*:*:*:*:*:*:* (string)

matchCriteriaId : 67829CF9-FDCB-4A17-9241-1B48A38B1A74 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:cisco:nx-os:4.2.\(2a\):*:*:*:*:*:*:* (string)

matchCriteriaId : C0476865-D306-47B7-A84A-C163A316D9DE (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(2a\):*:*:*:*:*:*:* (string)

matchCriteriaId : C6753978-267E-4398-A1F7-96C37B5C8600 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 16131960-37FE-4154-A82C-E3249B066DC4 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.0\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7B3296D4-DA94-4E41-BAAF-CEC0E84BB498 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 9B582362-FCFB-4D94-9C0E-2B7FD3F5340E (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(1a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 93FF6E77-B7C2-4CBB-A8FE-1D6218BA330C (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 5CAF2ADA-2C84-44EB-8893-0AB612AFF68F (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : B6D70623-8F98-44CA-A589-B93B167F88EA (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 10AE58DE-C708-4C15-B2C4-2366F4378344 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.1\(6\):*:*:*:*:*:*:* (string)

matchCriteriaId : 80510B23-1F02-4FE0-BF3D-E2CD2A5D5B2F (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 5F179FBC-22BE-4C44-AAE0-866F1D6B1270 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(3a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 0C628947-4A0E-4904-A6F7-745C3370A8F4 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 356B4143-5184-491B-9D10-19D6536366CD (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : C038896F-6DBC-4695-9DBE-A60F6C39AFFC (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(7\):*:*:*:*:*:*:* (string)

matchCriteriaId : 9F2453F2-704F-48F7-8009-991BE0B49251 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:cisco:nx-os:5.2\(9\):*:*:*:*:*:*:* (string)

matchCriteriaId : E00B4AC8-1D27-4394-AF28-10785AEFC073 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 48926DA6-2020-4D4F-AD12-555163C6C352 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 161C5BDB-CD50-40C7-B972-A1B650607338 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : 7A0E6C0C-B88D-4085-AA28-0EA8CD1AB419 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.0\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : A967FB72-BCEB-4A76-A322-DDB0C4094E7C (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(1\):*:*:*:*:*:*:* (string)

matchCriteriaId : C6F882AB-C25D-477F-96BF-7001BB77B955 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 35E48EE6-C498-4E13-AC5E-28F6B4391725 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(3\):*:*:*:*:*:*:* (string)

matchCriteriaId : A3B41075-01D1-4832-A025-07A378F2A5E6 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(4\):*:*:*:*:*:*:* (string)

matchCriteriaId : 858E4134-643C-422C-8441-5372F4BC25D8 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(4a\):*:*:*:*:*:*:* (string)

matchCriteriaId : A12BFDB0-4B90-4EB6-9CBE-A7A33C57EA9E (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.1\(5\):*:*:*:*:*:*:* (string)

matchCriteriaId : 3AB9928F-B632-4A06-8065-FFB85998D979 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(2\):*:*:*:*:*:*:* (string)

matchCriteriaId : 2FDE8EF9-47CF-451D-9570-3D369D74D44F (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(2a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 55A760CE-5E63-4A6B-8DA3-A473BC3900E3 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(6\):*:*:*:*:*:*:* (string)

matchCriteriaId : 0E738E86-B75F-48BF-9E76-C7DD470F3688 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(6b\):*:*:*:*:*:*:* (string)

matchCriteriaId : 68C6090F-0B05-46F0-8A67-928FE1C36D5F (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(8\):*:*:*:*:*:*:* (string)

matchCriteriaId : FBD345BD-83EF-4913-A0F3-74E52AD76BBA (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(8a\):*:*:*:*:*:*:* (string)

matchCriteriaId : 46B2B97B-DDB7-4208-BF1A-D10C8A075A14 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(8b\):*:*:*:*:*:*:* (string)

matchCriteriaId : 317C8BE8-84DA-43D5-AE93-7E7DCDE6883E (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(10\):*:*:*:*:*:*:* (string)

matchCriteriaId : ED7B1216-4C4F-4A23-9474-23876649ABF3 (string)

vulnerable : true (boolean)

}

42 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(12\):*:*:*:*:*:*:* (string)

matchCriteriaId : 57892CBB-8C95-4E56-90F8-B77BBBDC03FB (string)

vulnerable : true (boolean)

}

43 : { »

criteria : cpe:2.3:o:cisco:nx-os:6.2\(14\)s1:*:*:*:*:*:*:* (string)

matchCriteriaId : BE8505B4-61A1-4E98-8E13-9F8BAF825E42 (string)

vulnerable : true (boolean)

}

44 : { »

criteria : cpe:2.3:o:cisco:nx-os:7.2\(0\)n1\(0.1\):*:*:*:*:*:*:* (string)

matchCriteriaId : 185B1E14-1944-4BD2-AA45-0F5025EDDC84 (string)

vulnerable : true (boolean)

}

45 : { »

criteria : cpe:2.3:o:cisco:nx-os:base:*:*:*:*:*:*:* (string)

matchCriteriaId : CFBAD221-BBD3-4BE6-974F-361C8E0FC6E2 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000 and 7700 devices allows remote attackers to execute arbitrary code via long parameters in a packet header, aka Bug ID CSCuy95701. (string)

}

1 : { »

lang : es (string)

value : Desbordamiento de búfer en la funcionalidad Overlay Transport Virtualization (OTV) GRE en Cisco NX-OS 5.0 hasta la versión 7.3 en dispositivos Nexus 7000 y 7700 permite a atacantes remotos ejecutar código arbitrario a través de parámetros largos en una cabecera de paquete, vulnerabilidad también conocida como Bug ID CSCuy95701. (string)

}

]

id : CVE-2016-1453 (string)

lastModified : 2025-04-12T10:46:40.837 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : HIGH (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : NONE (string)

availabilityImpact : COMPLETE (string)

baseScore : 10 (number)

confidentialityImpact : COMPLETE (string)

integrityImpact : COMPLETE (string)

vectorString : AV:N/AC:L/Au:N/C:C/I:C/A:C (string)

version : 2.0 (string)

}

exploitabilityScore : 10 (number)

impactScore : 10 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2016-10-06T10:59:02.693 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv (string)

}

1 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Not Applicable (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/93409 (string)

}

2 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Not Applicable (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1036946 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161005-otv (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Not Applicable (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securityfocus.com/bid/93409 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Not Applicable (string)

1 : Third Party Advisory (string)

2 : VDB Entry (string)

]

url : http://www.securitytracker.com/id/1036946 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Deferred (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-119 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object