CVE-2016-6399

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control...

7.5 High

CVE-2016-6399 is a high vulnerability (CVSS 7.5) in Cisco Ace 4700 Series Application Control Engine Appliance, published September 12, 2016. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.94%, the 80th percentile. No source names a fixed version.

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control Engine appliances through A5 3.3 allow remote attackers to cause a denial of service (device reload) via crafted (1) SSL or (2) TLS packets, aka Bug ID CSCvb16317.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: None
Availability: High

Exploit likelihood

1.94%Up 0.8 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2016-6399
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:N/I:N/A:C
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

Record: CVE-2016-6399
Updated: 2026-11-02

EUVDEUVD-2016-7322 No score

Record: EUVD-2016-7322
Updated: 2026-11-03

GitHub AdvisoriesGHSA-hgp8-6r4g-qxxh 7.5

Cisco ACE30 Application Control Engine Module through A5 3.3 and ACE 4700 Application Control...

Record: GHSA-hgp8-6r4g-qxxh
CVSS 3.0: 7.5 HighCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness: CWE-20
Updated: 2026-11-02

Affected products

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD