TI-2016-01342 Aliases CVE-2016-1454 GHSA-3hgg-2mhh-39vr

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500…

LOW 34CWE-20Published 2016-10-06 · Updated 2024-08-05

Key facts

Attack vector: Network
Privileges required: None
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: None · None · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Cisco NX-OS 4.0 through 7.3 and 11.0 through 11.2 on 1000v, 2000, 3000, 3500, 5000, 5500, 5600, 6000, 7000, 7700, and 9000 devices allows remote attackers to cause a denial of service (device reload) by leveraging a peer relationship to send a crafted BGP UPDATE message, aka Bug IDs CSCuq77105 and CSCux11417.

Why it matters now

EPSS 0.02583 85th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 60

CPE	Versions	Role	Vendor
cpe:2.3:o:cisco:nx-os::::::::	before 6.0\(2\)u6\(7\); 6.1 to before 7.0\(3\)i4\(1\)	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_3016:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3048:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_31108pc-v:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_31108tc-v:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_31128pq:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3132q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3132q-v:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3164q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3172:-:::::::*	not specified by NVD	Running on	Cisco

cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 6.0\(2\)u6\(7\); 6.1 to before 7.0\(3\)i4\(1\) Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Show 50 more CPE

CPE	Versions	Role	Vendor
cpe:2.3:h:cisco:nexus_3232c:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3264q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	before 7.1\(4\)n1\(1\); 7.2 to before 7.2\(2\)n1\(1\); 7.3 to before 7.3\(0\)n1\(1\)	Vulnerable	Cisco
cpe:2.3:h:cisco:5548p:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5548up:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5596t:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5596up:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:56128p:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5624q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5648q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5672up:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5672up-16g:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:5696q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_6001:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_6004:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	before 5.2	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_5010:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_5020:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	before 7.2\(2\)d1\(1\); 7.3 to before 7.3\(1\)d1\(1\)	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_7000_10-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7000_18-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7000_4-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7000_9-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7700_10-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7700_18-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7700_2-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_7700_6-slot:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	before 5.2\(1\)sv3\(1.15\)	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_1000v_for_vmware_vsphere:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	11.0 to before 11.1\(1j\)	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_92160yc-x:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_92304qc:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9236c:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9272q:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_93108tc-ex:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_93120tx:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_93128tx:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_93180yc-ex:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9332pq:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9372px:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9372tx:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9396px:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9396tx:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9504:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9508:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_9516:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:o:cisco:nx-os::::::::	before 6.0\(2\)a8\(1\)	Vulnerable	Cisco
cpe:2.3:h:cisco:nexus_3524:-:::::::*	not specified by NVD	Running on	Cisco
cpe:2.3:h:cisco:nexus_3548:-:::::::*	not specified by NVD	Running on	Cisco

cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 7.1\(4\)n1\(1\); 7.2 to before 7.2\(2\)n1\(1\); 7.3 to before 7.3\(0\)n1\(1\) Vulnerable ·Cisco
cpe:2.3:h:cisco:5548p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5548up:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5596t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5596up:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:56128p:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5624q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5648q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5672up:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5672up-16g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:5696q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 5.2 Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_5020:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 7.2\(2\)d1\(1\); 7.3 to before 7.3\(1\)d1\(1\) Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7000_4-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7700_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7700_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7700_2-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_7700_6-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 5.2\(1\)sv3\(1.15\) Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_1000v_for_vmware_vsphere:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions 11.0 to before 11.1\(1j\) Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:* Versions before 6.0\(2\)a8\(1\) Vulnerable ·Cisco
cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2016-1454
2026-10-03 Alias added: GHSA-3hgg-2mhh-39vr

References

Advisory 1

20161005 Cisco NX-OS Border Gateway Protocol Denial of Service Vulnerability

TI-2023-23979 The HTTP/2 protocol allows a denial of service (server resource consumption) because… KEVCVSS 3.1HIGH 7.5
TI-2024-13332 Cisco NX-OS Software CLI Command Injection Vulnerability KEVCVSS 3.1MEDIUM 6.7
TI-2018-00260 Improper input validation in Cisco NX-OS unknown CVSS 3.0CRITICAL 9.8
TI-2019-01226 Cisco NX-OS Software Netstack Denial of Service Vulnerability CVSS 3.1HIGH 8.6
TI-2022-05183 Cisco NX-OS Software Cisco Fabric Services Over IP Denial of Service Vulnerability CVSS 3.1HIGH 8.6
TI-2022-05182 Cisco Nexus 9000 Series Switches Bidirectional Forwarding Detection Denial of Service Vulnerability CVSS 3.1HIGH 8.6

See all 274 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences