High severity · published Sep 19, 2016
CVE-2016-6415
Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
In wildKEV
7.5
CVSS
87.7%
EPSS
Yes
On KEV
Description
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)87.7% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed May 19, 2023
Federal remediation dueJun 9, 2023
Ransomware campaign useNot known
Affected products
Which versions
IX
IOS XE · Cisco
through 3.18s · source: NVD
IO
Ios · Cisco
12.2 through 12.4; 15.0 through 15.6 · source: NVD
IX
Ios XR · Cisco
4.3.0 through 4.3.4; 5.0.0 before 5.3.0 · source: NVD
II
IOS, IOS XR, and IOS XE · Cisco
All versions, or not specified · source: KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-6415
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-6415
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
vdb-entry
http://www.securitytracker.com/id/1036841
vendor-advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1
vdb-entry
http://www.securityfocus.com/bid/93003
More from IOS XE
10.0
CVE-2023-20198
Cisco IOS XE Web UI Privilege Escalation Vulnerability
9.8
CVE-2018-0151
Cisco IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution Vulnerability
9.8
CVE-2017-3881
Cisco IOS and IOS XE Remote Code Execution Vulnerability
8.8
CVE-2018-0167
Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability
8.8
CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability