Test ID:	1.3.6.1.4.1.25623.1.0.106373
Category:	CISCO
Title:	Cisco ASR 900 Series Aggregation Services Routers Buffer Overflow Vulnerability
Summary:	A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900;Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code;on, the affected system.
Description:	Summary: A vulnerability in the Transaction Language 1 (TL1) code of Cisco ASR 900 Series routers could allow an unauthenticated, remote attacker to cause a reload of, or remotely execute code on, the affected system. Vulnerability Insight: The vulnerability exists because the affected software performs incomplete bounds checks on input data. An attacker could exploit this vulnerability by sending a malicious request to the TL1 port, which could cause the device to reload. Vulnerability Impact: An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or cause a reload of the affected system. Solution: Update to 3.17.3S, 3.18.2S or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-6441 BugTraq ID: 94072 http://www.securityfocus.com/bid/94072 http://www.securitytracker.com/id/1037179
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.