Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.

Multiple vulnerabilities in the multicast subsystem of Cisco IOS and IOS XE Software could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition. The issues are in IPv4 Multicast Source Discovery Protocol (MSDP) and IPv6 Protocol Independent Multicast (PIM). 

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

According to its self-reported version number and configuration, the remote Cisco IOS device is affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists due to improper     validation of packets encapsulated in a PIM register     message. An unauthenticated, remote attacker can exploit     this, by sending an IPv6 PIM register packet to a PIM     rendezvous point (RP), to cause the device to restart.
    (CVE-2016-6382)

  - A denial of service vulnerability exists in the IPv4     Multicast Source Discovery Protocol (MSDP)     implementation due to improper validation of     Source-Active (SA) messages received from a configured     MSDP peer. An unauthenticated, remote attacker can     exploit this to cause the device to restart.
    (CVE-2016-6392)

According to its self-reported version number and configuration, the remote Cisco IOS XE device is affected by multiple denial of service vulnerabilities :

  - A denial of service vulnerability exists due to improper     validation of packets encapsulated in a PIM register     message. An unauthenticated, remote attacker can exploit     this, by sending an IPv6 PIM register packet to a PIM     rendezvous point (RP), to cause the device to restart.
    (CVE-2016-6382)

  - A denial of service vulnerability exists in the IPv4     Multicast Source Discovery Protocol (MSDP)     implementation due to improper validation of     Source-Active (SA) messages received from a configured     MSDP peer. An unauthenticated, remote attacker can     exploit this to cause the device to restart.
    (CVE-2016-6392)

ID	Name	Product	Family	Severity
501823	Rockwell Automation Stratix Cisco IOS and IOS XE Software Multicast Routing Denial of Service (CVE-2016-6382)	Tenable OT Security	Tenable.ot	high
93899	Cisco IOS Multicast Routing Multiple DoS (cisco-sa-20160928-msdp)	Nessus	CISCO	high
93898	Cisco IOS XE Multicast Routing Multiple DoS (cisco-sa-20160928-msdp)	Nessus	CISCO	high

Detections

Analytics

CVE-2016-6382

high

Tenable Plugins

high

high

high