CVE-2016-6415

Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
87.7%
EPSS
100%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

Vendor
Cisco
Product
IOS, IOS XR, and IOS XE
Added to KEV
May 19, 2023
Remediation due
Jun 9, 2023 (US federal deadline)
Ransomware use
Not known
Weakness
CWE-200
EPSS
87.7% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded