Cisco 1000 Series Connected Grid Routers CVE-2016-1333 SNMP BRIDGE MIB DoS Vulnerability

Key Information Vulnerability Title: Cisco 1000 Series Connected Grid Routers SNMP BRIDGE MIB Denial of Service Vulnerability Severity: Medium Vulnerability ID: cisco-sa-20160216-grid CVE Number: CVE-2016-1333 CWE Number: CWE-399 Initial Release Date: February 16, 2016, 22:00 GMT Temporary Workaround Available: Yes Cisco Bug ID: CSCux89878 CVSS Score: Base Score 6.8, Temporal Score 6.5 Summary Vulnerability Description: A vulnerability in the Simple Network Management Protocol (SNMP) BRIDGE Management Information Base (MIB) allows an authenticated remote attacker to cause a Denial of Service (DoS) condition on Cisco 1000 Series Connected Grid Routers. Root Cause: Due to incorrect implementation of certain SNMP Object Identifiers (OIDs) within the BRIDGE MIB. Exploitation Method: Attackers can exploit this vulnerability by sending authenticated SNMP requests targeting specific OIDs, causing the affected device to reload, and each SNMP request results in a DoS condition. Affected Products Affected Products: Cisco 1000 Series Connected Grid Routers, if SNMP functionality is configured in the software. Products Confirmed Not Affected: No other Cisco products are currently known to be affected by this vulnerability. Indicators of Compromise Exploitation Consequences: Exploitation of the vulnerability causes the affected device to reload and generate a core file. Customers should contact Cisco Technical Assistance Center (TAC) to review the core file and determine whether the device was compromised due to exploitation of this vulnerability. Temporary Workarounds Recommendation: Administrators can disable SNMP functionality if not required. If SNMP is needed, administrators should stop polling BRIDGE MIB OIDs. Fixed Software Software Upgrade: Customers considering software upgrades should consult the Cisco Security Advisories and Response Archive, and review subsequent advisories to determine exposure and complete upgrade solutions. Customers should ensure upgraded devices have sufficient memory and confirm that current hardware and software configurations are supported by the new version. Exploitation and Public Disclosure Public Information: Cisco Product Security Incident Response Team (PSIRT) is not currently aware of any public disclosures or malicious use of the vulnerability described in this advisory.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco 1000 Series Connected Grid Routers CVE-2016-1333 SNMP BRIDGE MIB DoS Vulnerability