Cisco IOS XE 16.1 vulnerabilities

2 CVEs affecting Cisco IOS XE 16.1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-6386, published 2016-10-05.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-6381, published 2016-10-05. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Cisco IOS 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.18 and 16.1 allow remote attackers to cause a denial of service (memory consumption or device reload) via fragmented IKEv1 packets, aka…
• CVE-2016-6386, published 2016-10-05. High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days. Cisco IOS XE 3.1 through 3.17 and 16.1 on 64-bit platforms allows remote attackers to cause a denial of service (data-structure corruption and device reload) via fragmented IPv4 packets, aka Bug ID…