Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Cisco ACE30/4700 can reboot from crafted SSL/TLS packets

CVE-2016-6399 · published 10 years ago
Summary

The ACE30 module and ACE 4700 appliance running software version A5 3.3 may unexpectedly restart when they receive specially crafted SSL or TLS network traffic. This forces the device to reload, interrupting traffic and services. Update the devices with the latest software release from Cisco to stop the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco ace_application_control_engine_module_a1 7a
7b
8.0
8.0a
cpe:2.3:a:cisco:ace_application_control_engine_module_a1:7a:*:*:*:*:*:*:*
cisco ace_application_control_engine_module_a3 1.0
2.0
2.2
2.3
2.4
2.5
2.6
2.7
cpe:2.3:a:cisco:ace_application_control_engine_module_a3:1.0:*:*:*:*:*:*:*
cisco ace_application_control_engine_module_a4 1.0
1.1
2.0
2.1a
2.2
2.3
cpe:2.3:a:cisco:ace_application_control_engine_module_a4:1.0:*:*:*:*:*:*:*
cisco ace_application_control_engine_module_a5 1.0
1.1
1.2
2.0
2.1
2.1e
3.0
3.1a
3.1b
3.2
3.3
cpe:2.3:a:cisco:ace_application_control_engine_module_a5:1.0:*:*:*:*:*:*:*
cisco ace_4700_series_application_control_engine_appliance a5\(1.0\)
a5\(1.1\)
a5\(1.2\)
a5\(2.0\)
a5\(2.1\)
a5\(2.1e\)
a5\(3.0\)
a5_base
cpe:2.3:h:cisco:ace_4700_series_application_control_engine_appliance:a5\(1.0\):*:*:*:*:*:*:*
cisco ace_4700_series_application_control_engine_appliance_a1 7
7a
7b
8.0
8.0a
cpe:2.3:h:cisco:ace_4700_series_application_control_engine_appliance_a1:7:*:*:*:*:*:*:*
cisco ace_4700_series_application_control_engine_appliance_a3 1.0
2.0
2.2
2.3
2.4
2.5
2.6
2.7
cpe:2.3:h:cisco:ace_4700_series_application_control_engine_appliance_a3:1.0:*:*:*:*:*:*:*
cisco ace_4700_series_application_control_engine_appliance_a4 1.0
1.1
2.0
2.1a
2.2
2.3
cpe:2.3:h:cisco:ace_4700_series_application_control_engine_appliance_a4:1.0:*:*:*:*:*:*:*
cisco ace_4700_series_application_control_engine_appliance_a5 3.1a
3.1b
3.2
3.3
cpe:2.3:h:cisco:ace_4700_series_application_control_engine_appliance_a5:3.1a:*:*:*:*:*:*:*
Original advisory text
Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) vi...
Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
2% chance of attack within 30 days
Type
CWE-20Improper Input Validation
Timeline
Published12 Sep 2016
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-6399 · NVD
Track software like this
Free during beta