Skip to content
Fencer Vulns
high 8.1

CVE-2016-6380 json

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensit…

published 2016-10-05 10 y ago modified 2026-06-17 4 mo ago also EUVD-2016-7303

cvss
8.1
version 3.0, NVD
cisa kev
Not listed
not in CISA's catalog
epss
2.9%
EPSS 2.9% chance of exploitation in 30 days, percentile 87%
public exploits
0
none known

Summary

The DNS forwarder in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 3.1 through 3.15 allows remote attackers to obtain sensitive information from process memory or cause a denial of service (data corruption or device reload) via a crafted DNS response, aka Bug ID CSCup90532.

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

cisa ICSA-16-287-04 updated cvss 9.9

Rockwell Automation Stratix Denial-of-Service and Memory Leak Vulnerabilities

  • Rockwell Automation Allen-Bradley ArmorStratix 5700 Industrial Managed Ethernet Switches <=15.24EA3 Rockwell Automation Allen-Bradley Stratix 5400 Industrial Ethernet Switches <=15.24EA3 Rockwell Automation Allen-Bradley Stratix 5410 Industrial Distribution Switches <=15.24EA3 Rockwell Automation Allen-Bradley Stratix 5700 Industrial Managed Ethernet Switches <=15.24EA3 Rockwell Automation Allen-Bradley Stratix 8000 Modular Managed Ethernet Switches <=15.24EA3
    affected: mitigation rockwellautomation.custhelp.com

From CISA ICS and IT advisories (CSAF, https://github.com/cisagov/CSAF), a U.S. Government work; changed: reduced to products, statuses and remediations. CISA notification · csaf

Exploit prediction

2.89% chance of exploitation in the next 30 days, higher than 87% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.0 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 8.3 AV:N/AC:M/Au:N/C:P/I:P/A:C

Classification

Weakness
  • CWE-20 Improper Input Validation
Technology feeds

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.