CVE:CVE-2016-1349
CNNVD:CNNVD-201603-359
Cisco IOS和IOS XE Software都是美国思科（Cisco）公司为其网络设备开发的操作系统。
Cisco IOS Software和IOS XE Software的Smart Install client实现过程中存在安全漏洞。远程攻击者可借助Smart Install数据包中的图像列表参数利用该漏洞造成拒绝服务（设备重载）。以下产品及版本受到影响：Cisco IOS 12.2版本，15.0版本，15.2版本，IOS XE 3.2版本至3.7版本。
solution:Upgrade cisco ios_xe to a higher version than 3.2ja_3.2.0ja,3.2se_3.2.0se,3.2se_3.2.1se,3.2se_3.2.2se,3.2se_3.2.3se,3.3se_3.3.0se,3.3se_3.3.1se,3.3se_3.3.2se,3.3se_3.3.3se,3.3se_3.3.4se,3.3se_3.3.5se,3.3xo_3.3.0xo,3.3xo_3.3.1xo,3.3xo_3.3.2xo,3.4sg_3.4.0sg,3.4sg_3.4.1sg,3.4sg_3.4.2sg,3.4sg_3.4.3sg,3.4sg_3.4.4sg,3.4sg_3.4.5sg,3.4sg_3.4.6sg,3.5e_3.5.0e,3.5e_3.5.1e,3.5e_3.5.2e,3.5e_3.5.3e,3.6e_3.6.0e,3.6e_3.6.1e,3.6e_3.6.2ae,3.6e_3.6.2e,3.7e_3.7.0e,3.7e_3.7.1e,3.7e_3.7.2e,and avoid the version 3.2ja_3.2.0ja,3.2se_3.2.0se,3.2se_3.2.1se,3.2se_3.2.2se,3.2se_3.2.3se,3.3se_3.3.0se,3.3se_3.3.1se,3.3se_3.3.2se,3.3se_3.3.3se,3.3se_3.3.4se,3.3se_3.3.5se,3.3xo_3.3.0xo,3.3xo_3.3.1xo,3.3xo_3.3.2xo,3.4sg_3.4.0sg,3.4sg_3.4.1sg,3.4sg_3.4.2sg,3.4sg_3.4.3sg,3.4sg_3.4.4sg,3.4sg_3.4.5sg,3.4sg_3.4.6sg,3.5e_3.5.0e,3.5e_3.5.1e,3.5e_3.5.2e,3.5e_3.5.3e,3.6e_3.6.0e,3.6e_3.6.1e,3.6e_3.6.2ae,3.6e_3.6.2e,3.7e_3.7.0e,3.7e_3.7.1e,3.7e_3.7.2e; Upgrade intel core_i5-9400f_firmware to a higher version than -; Upgrade netgear jr6150_firmware to a higher version than 2017-01-06,and avoid the version (,2017-01-06); Upgrade samsung x14j_firmware to a higher version than t-ms14jakucb-1102.5,and avoid the version t-ms14jakucb-1102.5; Upgrade sun opensolaris to a higher version than snv_124,and avoid the version snv_124; Upgrade zyxel gs1900-10hp_firmware to a higher version than 2.50\(aazi.0\c0,and avoid the version (,2.50\(aazi.0\)c0); Upgrade zzinc keymouse_firmware to a higher version than 3.08,and avoid the version 3.08