CVE-2019-16026

CVE-2019-16026 is a denial-of-service vulnerability in Cisco Mobility Management Entity (MME) products, including ASR 5000, 5500, and 5700 series, caused by insufficient input validation of Stream Control Transmission Protocol (SCTP) traffic. An unauthenticated, remote attacker can exploit this by leveraging a man-in-the-middle position to send a crafted SCTP message, leading to the MME ceasing SCTP communication with an eNodeB. Rated Medium (CVSS 5.9), this attack has high complexity but can result in a complete denial of service. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.