CVE-2016-6391 Cisco IOS Software Common Industrial Protocol Request Denial of Service Vulnerability (cisco-sa-20160928-cip)

A vulnerability in the Common Industrial Protocol (CIP) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to create a denial of service (DoS) condition.
The vulnerability is due to a failure to properly process an unusual, but valid, set of requests to an affected device.

An attacker could exploit this vulnerability by submitting a CIP message request designed to trigger the vulnerability to an affected device. An exploit could cause the switch to stop processing traffic, requiring a restart of the device to regain functionality.

Refer to Cisco advisory cisco-sa-20160928-cip for updates and patch information.

Patch:
Following are links for downloading patches to fix the vulnerabilities:

cisco-sa-20160928-cip: Cisco IOS