The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX-OS allows remote attackers to cause a denial of service (packet-processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Cisco IOS XE 2.1 through 3.17S, IOS XR 2.0.0 through 5.3.2, and NX- OS allows remote attackers to cause a denial of service (packet- processing outage) via crafted ND messages, aka Bug ID CSCuz66542, as exploited in the wild in May 2016.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

A vulnerability in the IP Version 6 (IPv6) packet processing functions of multiple Cisco products could allow an unauthenticated, remote attacker to cause an affected device to stop processing IPv6 traffic, leading to a denial of service (DoS) condition on the device. The vulnerability is due to insufficient processing logic for crafted IPv6 packets that are sent to an affected device. An attacker could exploit this vulnerability by sending crafted IPv6 Neighbor Discovery (ND) packets to an affected device for processing. A successful exploit could allow the attacker to cause the device to stop processing IPv6 traffic, leading to a DoS condition on the device. 

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

According to its self-reported version number, the remote Juniper Junos device is affected by multiple vulnerabilities :

  - A flaw exists due to improper handling of malformed IPv6     ND packets. An unauthenticated, remote attacker can     exploit this, via specially crafted ND packets, to cause     the device to stop processing IPv6 traffic, resulting in     a denial of service condition.

  - A flaw exists that is triggered when handling QFX5100     exceptions. An unauthenticated, remote attacker can     exploit this to transition IPv6 ND traffic to the     routing engine, resulting in a partial denial of service     condition.

  - An unspecified flaw exists that allows an     unauthenticated, remote attacker to cause improper     forwarding of IPv6 ND traffic in violation of RFC4861.

Note that Nessus has not tested for these issues but has instead relied only on the device's self-reported model and current configuration.

ID	Name	Product	Family	Severity
502758	Cisco IOS Improper Input Validation (CVE-2016-1409)	Tenable OT Security	Tenable.ot	high
501830	Rockwell Automation Stratix IPv6 Neighbor Discovery Crafted Packet Denial of Service (CVE-2016-1409)	Tenable OT Security	Tenable.ot	high
91762	Juniper Junos IPv6 Neighbor Discovery (ND) Traffic Handling Multiple Vulnerabilities (JSA10749)	Nessus	Junos Local Security Checks	medium

Detections

Analytics

CVE-2016-1409

high

Tenable Plugins

high

high

medium