Read the docs
TI-2016-05554 Aliases CVE-2016-6473GHSA-cmgm-hrg8-r7v6

Resource management flaw in Cisco IOS

Priority LOW 30CWE-399Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

A vulnerability in Cisco IOS on Catalyst Switches and Nexus 9300 Series Switches could allow an unauthenticated, adjacent attacker to cause a Layer 2 network storm. More Information: CSCuu69332, CSCux07028. Known Affected Releases: 15.2(3)E. Known Fixed Releases: 12.2(50)SE4 12.2(50)SE5 12.2(50)SQ5 12.2(50)SQ6 12.2(50)SQ7 12.2(52)EY4 12.2(52)SE1 12.2(53)EX 12.2(53)SE 12.2(53)SE1 12.2(53)SE2 12.2(53)SG10 12.2(53)SG11 12.2(53)SG2 12.2(53)SG9 12.2(54)SG1 12.2(55)EX3 12.2(55)SE 12.2(55)SE1 12.2(55)SE10 12.2(55)SE2 12.2(55)SE3 12.2(55)SE4 12.2(55)SE5 12.2(55)SE6 12.2(55)SE7 12.2(55)SE8 12.2(55)SE9 12.2(58)EZ 12.2(58)SE1 12.2(58)SE2 12.2(60)EZ 12.2(60)EZ1 12.2(60)EZ2 12.2(60)EZ3 12.2(60)EZ4 12.2(60)EZ5 12.2(60)EZ6 12.2(60)EZ7 12.2(60)EZ8 15.0(1)EY2 15.0(1)SE 15.0(1)SE2 15.0(1)SE3 15.0(2)EA 15.0(2)EB 15.0(2)EC 15.0(2)ED 15.0(2)EH 15.0(2)EJ 15.0(2)EJ1 15.0(2)EK1 15.0(2)EX 15.0(2)EX1 15.0(2)EX3 15.0(2)EX4 15.0(2)EX5 15.0(2)EY 15.0(2)EY1 15.0(2)EY2 15.0(2)EZ 15.0(2)SE 15.0(2)SE1 15.0(2)SE2 15.0(2)SE3 15.0(2)SE4 15.0(2)SE5 15.0(2)SE6 15.0(2)SE7 15.0(2)SE9 15.0(2)SG10 15.0(2)SG3 15.0(2)SG6 15.0(2)SG7 15.0(2)SG8 15.0(2)SG9 15.0(2a)EX5 15.1(2)SG 15.1(2)SG1 15.1(2)SG2 15.1(2)SG3 15.1(2)SG4 15.1(2)SG5 15.1(2)SG6 15.2(1)E 15.2(1)E1 15.2(1)E2 15.2(1)E3 15.2(1)EY 15.2(2)E 15.2(2)E3 15.2(2b)E.

Why it matters now

EPSS 0.00641 50th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco IOSCisco IOS—No fix listedCNA
  • Cisco IOS Vendor— Affected Cisco IOS Fixed in — No fix listed CNA

CPE configurations NVD · 7

CPEVersionsRoleVendor
cpe:2.3:o:cisco:ios:15.0\(2\)se8:*:*:*:*:*:*:*15.0(2)se8VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(2\)e1:*:*:*:*:*:*:*15.2(2)e1VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(2\)e2:*:*:*:*:*:*:*15.2(2)e2VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(2a\)e1:*:*:*:*:*:*:*15.2(2a)e1VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(3\)e:*:*:*:*:*:*:*15.2(3)eVulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(3\)e1:*:*:*:*:*:*:*15.2(3)e1VulnerableCisco
cpe:2.3:o:cisco:ios:15.2\(3a\)e:*:*:*:*:*:*:*15.2(3a)eVulnerableCisco
  • cpe:2.3:o:cisco:ios:15.0\(2\)se8:*:*:*:*:*:*:* Versions 15.0(2)se8 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(2\)e1:*:*:*:*:*:*:* Versions 15.2(2)e1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(2\)e2:*:*:*:*:*:*:* Versions 15.2(2)e2 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(2a\)e1:*:*:*:*:*:*:* Versions 15.2(2a)e1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(3\)e:*:*:*:*:*:*:* Versions 15.2(3)e Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(3\)e1:*:*:*:*:*:*:* Versions 15.2(3)e1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:ios:15.2\(3a\)e:*:*:*:*:*:*:* Versions 15.2(3a)e Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2016-6473
  2. 2026-10-03 Alias added: GHSA-cmgm-hrg8-r7v6
  3. 2026-10-21 EPSS moved to the 50th–90th percentile

References

Advisory 1

  • TI-2018-00138 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-09019 Improper input validation in Cisco IOS and IOS XE KEVCVSS 3.1CRITICAL 9.8
  • TI-2017-02977 Improper input validation in Cisco IOS and IOS XE Software KEVCVSS 3.1CRITICAL 9.8
  • TI-2018-00135 Memory corruption in Cisco IOS, IOS XE, and IOS XR KEVCVSS 3.1HIGH 8.8
  • TI-2017-04499 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
  • TI-2017-04498 Memory corruption in Cisco IOS KEVCVSS 3.1HIGH 8.8
See all 617 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences