Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.9

Cisco IOS Data in Motion can be crashed remotely

CVE-2016-6403 · published 10 years ago
Summary

The Data in Motion component in Cisco IOS 15.6(1)T and IOS XE (when the IOx feature is turned on) can be taken down by a specially crafted network packet. An attacker from outside the network could send this packet and cause the service to stop working, affecting connectivity. Apply the latest Cisco software updates or disable the IOx feature if it is not needed to prevent the issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
cisco ios <= 15.6\(1\)t
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
Original advisory text
The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CS...
The Data in Motion (DMo) application in Cisco IOS 15.6(1)T and IOS XE, when the IOx feature set is enabled, allows remote attackers to cause a denial of service via a crafted packet, aka Bug IDs CSCuy82904, CSCuy82909, and CSCuy82912.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.9 Medium
Exploitation
2% chance of attack within 30 days
Type
CWE-399Resource Management Errors
Timeline
Published18 Sep 2016
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2016-6403 · NVD
Track software like this
Free during beta