CVE-2016-1399

mediumPriorität · verfolgen · 31EPSS 0.025 · 84. PerzentilEUUS
grimoire priorityP3 · Track
Exploitable?
—
no known exploitation
Likely / severe?
2.47% (84th) EPSS
CVSS 5 · medium
Is it mine?
11 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · cisa_csaf_ot · nvd

EPSS · bewertet 2026-10-27

The packet-processing microcode in Cisco IOS 15.2(2)EA, 15.2(2)EA1, 15.2(2)EA2, and 15.2(4)EA on Industrial Ethernet 4000 devices and 15.2(2)EB and 15.2(2)EB1 on Industrial Ethernet 5000 devices allows remote attackers to cause a denial of service (packet data corruption) via crafted IPv4 ICMP packets, aka Bug ID CSCuy13431.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationAllen-Bradley Stratix 5400 Industrial Ethernet Switch Firmwarecisa_csaf_ot

    The identified vulnerability was originally reported by Cisco to impact the Cisco Industrial Ethernet 4000 Series and 5000 Series switches. Rockwell Automation determined that the vulnerability also impacts Rockwell Automation’s Allen-Bradley Stratix 5400 Industrial Ethernet Switches and the Allen-Bradley Stratix 5410 Industrial Distribution Switches, which contain affected versions of the Cisco IOS firmware. In response to the reported vulnerability, Rockwell Automation has released a new version of the Allen-Bradley Stratix 5400 and Allen-Bradley Stratix 5410 firmware, Version 15.2(4)EA3, which addresses the vulnerability. Rockwell Automations encourages asset owners to upgrade to the newest available versions.

  • MitigationAllen-Bradley Stratix 5410 Industrial Distribution Switch Firmwarecisa_csaf_ot

    The identified vulnerability was originally reported by Cisco to impact the Cisco Industrial Ethernet 4000 Series and 5000 Series switches. Rockwell Automation determined that the vulnerability also impacts Rockwell Automation’s Allen-Bradley Stratix 5400 Industrial Ethernet Switches and the Allen-Bradley Stratix 5410 Industrial Distribution Switches, which contain affected versions of the Cisco IOS firmware. In response to the reported vulnerability, Rockwell Automation has released a new version of the Allen-Bradley Stratix 5400 and Allen-Bradley Stratix 5410 firmware, Version 15.2(4)EA3, which addresses the vulnerability. Rockwell Automations encourages asset owners to upgrade to the newest available versions.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.5
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5

v2.05mediumAV:N/AC:L/Au:N/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9
v3.07.5highCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.05.8mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:Nsecondary · CISA US
v3.06.9mediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)
03

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-399USprimärCWE-241US
04

betroffene Produkte (11)

Betroffene Produkte und Versionsbereiche.

05

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • ICSA-16-175-01Rockwell Automation Allen-Bradley Stratix 5400 and 5410 Packet Corruption Vulnerability2016-03-27icsa · cisa_csaf_otUS

    This CSAF advisory was extracted from unstructured data and may contain inaccuracies. If you notice any errors, please reach out to the designated contact at CISA CSAF: central@cisa.dhs.gov

06

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

07

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdcisa_csaf_otnvdNVDCVE.orgMITRE
veröffentlicht 2016-05-14geändert 2026-06-17
09

Referenzen (13)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan