VDB

CVE-2016-9201

CVE-2016-9201 PUBLISHED CVSS 5 MEDIUM

A vulnerability in the Zone-Based Firewall feature of Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to pass traffic that should otherwise have been dropped based on the configuration. More Information: CSCuz21015. Known Affected Releases: 15.3(3)M3. Known Fixed Releases: 15.6(2)T0.1 15.6(2.0.1a)T0 15.6(2.19)T 15.6(3)M.

EPSS 1.25% · 79.7th percentile

Risk Scores

CVSS 2.0
5
EPSS Score
1.25%
79.7th percentile

Affected Products

VendorProductVersions
ciscoios15.3\(3\)m3
n/aCisco IOS and Cisco IOS XECisco IOS and Cisco IOS XE

Timeline

  • Dec 7, 2016 CVE Published
  • Feb 4, 2022 EPSS Score
  • Mar 29, 2022 EPSS Score
  • May 20, 2022 EPSS Score
  • Jul 12, 2022 EPSS Score
  • Oct 26, 2022 EPSS Score
  • Dec 18, 2022 EPSS Score
  • Feb 8, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 2, 2023 EPSS Score
  • May 25, 2023 EPSS Score
  • Jul 16, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›