CVE-2016-6382: Cisco IOS

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

Cisco IOS 15.2 through 15.6 and IOS XE 3.6 through 3.17 and 16.1 allow remote attackers to cause a denial of service (device restart) via a malformed IPv6 Protocol Independent Multicast (PIM) register packet, aka Bug ID CSCuy16399.

Affected products

• Cisco IOS: version 15.2(1)sy only; version 15.2(1)sy0a only; version 15.2(1)sy1 only; version 15.2(1)sy1a only; version 15.2(2)e only; version 15.2(2)e1 only; …
• Cisco IOS XE: version 3.6.0e only; version 3.6.1e only; version 3.6.2ae only; version 3.6.2e only; version 3.6.3e only; version 3.6.4e only; …

Published 2016-10-05. Last modified 2026-06-17.