CVE-2016-1378 describes an information disclosure vulnerability in Cisco IOS prior to version 15.2(2)E1 on Catalyst switches. Remote attackers can exploit this flaw by sending a request to the Network Mobility Services Protocol (NMSP) port, allowing them to obtain potentially sensitive software-version information. Rated with a CVSS score of 5.3 (Medium), this vulnerability has a low attack complexity and requires no user interaction, but its impact is limited to confidentiality. The EPSS score and FAUCET Risk Score indicate a low probability of exploitation and overall risk. There is no evidence of active exploitation, and no public exploit code exists in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention or concern.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
15.1\(1\)sgCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(1\)sg:*:*:*:*:*:*:* | ||
15.1\(1\)sg1CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(1\)sg1:*:*:*:*:*:*:* | ||
15.1\(1\)sg2CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(1\)sg2:*:*:*:*:*:*:* | ||
15.1\(1\)syCPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(1\)sy:*:*:*:*:*:*:* | ||
15.1\(1\)sy1CPE matchmatch criteria | cpe:2.3:o:cisco:ios:15.1\(1\)sy1:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.