CVE-2016-1378: Cisco IOS

Medium severity, CVSS 5.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cisco IOS before 15.2(2)E1 on Catalyst switches allows remote attackers to obtain potentially sensitive software-version information via a request to the Network Mobility Services Protocol (NMSP) port, aka Bug ID CSCum62591.

Affected products

• Cisco IOS: version 15.1(1)sg only; version 15.1(1)sg1 only; version 15.1(1)sg2 only; version 15.1(1)sy only; version 15.1(1)sy1 only; version 15.1(1)sy2 only; …

Published 2016-04-14. Last modified 2026-06-17.