CVE-2016-1454: Cisco NX-OS

Medium severity, CVSS 6.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Affected products

• Cisco NX-OS: before 6.0\(2\)u6\(7\) (fixed in 6.0\(2\)u6\(7\)); from 6.1, before 7.0\(3\)i4\(1\) (fixed in 7.0\(3\)i4\(1\)); before 7.1\(4\)n1\(1\) (fixed in 7.1\(4\)n1\(1\)); from 7.2, before 7.2\(2\)n1\(1\) (fixed in 7.2\(2\)n1\(1\)); from 7.3, before 7.3\(0\)n1\(1\) (fixed in 7.3\(0\)n1\(1\)); before 5.2 (fixed in 5.2); …

Published 2016-10-06. Last modified 2026-06-17.