CVE-2016-1384: Cisco IOS

High severity, CVSS 7.5. EPSS: 2.5% chance of exploitation in the next 30 days.

The NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote attackers to modify the system time via crafted packets, aka Bug ID CSCux46898.

Affected products

• Cisco IOS: version 15.1(1)s only; version 15.1(1)s1 only; version 15.1(1)s2 only; version 15.1(2)s only; version 15.1(2)s1 only; version 15.1(2)s2 only; …
• Cisco IOS XE: version 3.2.0ja only; version 3.2.0s only; version 3.2.0se only; version 3.2.0sg only; version 3.2.0xo only; version 3.2.1s only; …

Published 2016-04-20. Last modified 2026-06-17.