CVE-2016-1428: Cisco IOS XE

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Double free vulnerability in Cisco IOS XE 3.15S, 3.16S, and 3.17S allows remote authenticated users to cause a denial of service (device restart) via a sequence of crafted SNMP read requests, aka Bug ID CSCux13174.

Affected products

• Cisco IOS XE: version 3.15.0s only; version 3.16.0s only; version 3.17.0s only

Published 2016-06-23. Last modified 2026-06-17.