CVE-2016-1436

HIGH 7.5CVE-2016-1436 · Published 23/06/2016 · updated 17/06/2026

In short

CVE-2016-1436 is a HIGH (CVSS 7.5) vulnerability affecting asr 5000 software (cisco).
Chance of exploitation in the next 30 days (EPSS): 1.8%, higher than 78.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
asr 5000 software cisco	`= 17.2.0= 17.2.0.59184= 17.3.1= 17.7.0= 18.0.0= 18.0.0.57828= 18.0.0.59167= 18.0.0.59211= 18.0.l0.59219= 18.1.0= 18.1.0.59776= 18.1.0.59780= 18.1_base= 18.4.0= 19.0.1= 19.0.m0.60737= 19.0.m0.60828= 19.0.m0.61045= 19.1.0= 19.1.0.61559= 19.2.0= 19.3.0`	No fix yet

Description

The General Packet Radio Switching Tunneling Protocol 1 (aka GTPv1) implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service (Session Manager process restart) via a crafted GTPv1 packet, aka Bug ID CSCuz46198.

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160621-asr · Vendor Advisory
securitytracker.com/id/1036152

More vulnerabilities in asr 5000 software

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

asr 5000 software

cisco

= 17.2.0= 17.2.0.59184= 17.3.1= 17.7.0= 18.0.0= 18.0.0.57828= 18.0.0.59167= 18.0.0.59211= 18.0.l0.59219= 18.1.0= 18.1.0.59776= 18.1.0.59780= 18.1_base= 18.4.0= 19.0.1= 19.0.m0.60737= 19.0.m0.60828= 19.0.m0.61045= 19.1.0= 19.1.0.61559= 19.2.0= 19.3.0

No fix yet

More vulnerabilities in asr 5000 software

See all →