CVE-2016-1454

MEDIUM
6.5
CVSS Score
Published: October 6, 2016 at 10:00 AM UTC
Updated: June 17, 2026 at 12:42 AM UTC
54 products affected across 1 vendorNx OSNexus 9508Nexus 93120Tx

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
MEDIUM6.5
Exploit prediction
EPSS 3%

Description

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

v < 5.2v < 5.2(1)sv3(1.15)v < 6.0(2)a8(1)v < 6.0(2)u6(7)v < 7.1(4)n1(1)v < 7.2(2)d1(1)11.0 ≤ v < 11.1(1j)6.1 ≤ v < 7.0(3)i4(1)7.2 ≤ v < 7.2(2)n1(1)7.3 ≤ v < 7.3(0)n1(1)7.3 ≤ v < 7.3(1)d1(1)
Affected range stops below 11.1(1j), so it looks safe — our inference, not a vendor statement
Affected range stops below 5.2, so it looks safe — our inference, not a vendor statement
Affected range stops below 5.2(1)sv3(1.15), so it looks safe — our inference, not a vendor statement
Affected range stops below 6.0(2)a8(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 6.0(2)u6(7), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.0(3)i4(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.1(4)n1(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.2(2)d1(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.2(2)n1(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3(0)n1(1), so it looks safe — our inference, not a vendor statement
Affected range stops below 7.3(1)d1(1), so it looks safe — our inference, not a vendor statement
cisco-5548p (environment) · cisco-5548up (environment) · cisco-5596t (environment) · cisco-5596up (environment) · cisco-56128p (environment) · cisco-5624q (environment) · cisco-5648q (environment) · cisco-5672up (environment) · cisco-5672up-16g (environment) · cisco-5696q (environment) · cisco-nexus-1000v-for-vmware-vsphere (environment) · cisco-nexus-3016 (environment) · cisco-nexus-3048 (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132q (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172 (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3548 (environment) · cisco-nexus-5010 (environment) · cisco-nexus-5020 (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-7000-10-slot (environment) · cisco-nexus-7000-18-slot (environment) · cisco-nexus-7000-4-slot (environment) · cisco-nexus-7000-9-slot (environment) · cisco-nexus-7700-10-slot (environment) · cisco-nexus-7700-18-slot (environment) · cisco-nexus-7700-2-slot (environment) · cisco-nexus-7700-6-slot (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment)
80%
All versions
All versions
80%
All versions
All versions
All versions
80%
All versions
80%
All versions
All versions
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

References (3)

VDB Entryx_refsource_BIDThird Party Advisory
http://www.securityfocus.com/bid/93417
VDB Entryx_refsource_SECTRACKThird Party Advisory
http://www.securitytracker.com/id/1036950

CVSS

Attack Vector
NETWORK
Complexity
LOW
Privileges
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-20

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card