CVE-2016-1350: Cisco IOS XE

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Cisco IOS 15.3 and 15.4, Cisco IOS XE 3.8 through 3.11, and Cisco Unified Communications Manager allow remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCuj23293.

Affected products

• Cisco IOS XE: version 3.8.0s only; version 3.8.1s only; version 3.8.2s only; version 3.9.0as only; version 3.9.0s only; version 3.9.1as only; …
• Lenovo Thinkcentre e75s Firmware: before m16kt61a (fixed in m16kt61a)
• Samsung x14j Firmware: version t-ms14jakucb-1102.5 only
• Sun Opensolaris: version snv_124 only
• Zyxel GS1900-10hp Firmware: before 2.50\(aazi.0\)c0 (fixed in 2.50\(aazi.0\)c0)
• Zzinc Keymouse Firmware: version 3.08 only

Published 2016-03-26. Last modified 2026-06-17.