CVE-2016-1407
N/A
Published: May 25, 2016 at 01:00 AM UTC
Updated: June 17, 2026 at 12:41 AM UTC
7 products affected across 1 vendorIOS XrAsr 9010Asr 9904
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 2%
Description
Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services (LPTS) flow-base entries, which allows remote attackers to cause a denial of service (session drop) by making many connection attempts to open TCP ports, aka Bug ID CSCux95576.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
2.0.03.0.03.0.13.2.03.2.13.2.23.2.33.2.43.2.503.2.63.3.03.3.13.3.23.3.33.3.43.4.03.4.13.4.23.4.33.5.03.5.23.5.33.5.43.6.03.6.13.6.23.6.33.6_base3.7.03.7.13.7.23.7.33.7_base3.8.03.8.13.8.23.8.33.8.43.9.03.9.13.9.23.9.34.0.04.0.14.0.114.0.24.0.34.0.44.0_base4.1.04.1.14.1.24.1_base4.2.04.2.14.2.24.2.34.2.44.3.04.3.14.3.24.3.34.3.45.0.05.0.15.0_base5.1.05.1.1.k9sec5.1.25.1.35.2.05.2.15.2.25.2.35.2.45.2.55.3.05.3.15.3.2
cisco-asr-9001 (environment) · cisco-asr-9006 (environment) · cisco-asr-9010 (environment) · cisco-asr-9904 (environment) · cisco-asr-9912 (environment) · cisco-asr-9922 (environment)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (2)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160519-ios-xrQuick Info
StatusMODIFIED
CWE
CWE-20
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card