IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key
7.5High KEV

CVE-2016-6415Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

cisco ios; cisco ios xe; cisco ios xr Published: (10 years ago)

Known exploited — Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

CISA confirmed this vulnerability is used in real attacks on 19.05.2023. Remediation deadline for US federal agencies: 09.06.2023.

Required action: Apply updates per vendor instructions. https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1; https://nvd.nist.gov/vuln/detail/CVE-2016-6415

Description

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.

Weakness (CWE): CWE-200

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
cisco ios 12.2 – ≤ 12.4
cisco ios xe ≤ 3.18s
cisco ios xr 4.3.0 – ≤ 4.3.4

References and patches

CPE matches (NVD) (5)
  • cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:* ≥ 12.2 ≤ 12.4
  • cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:* ≥ 15.0 ≤ 15.6
  • cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:* ≤ 3.18s
  • cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:* ≥ 4.3.0 ≤ 4.3.4
  • cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:* ≥ 5.0.0 < 5.3.0

Recent CVEs in the same product — Cisco IOS / IOS XE / ASA

8.6High
CVE-2026-76418 KEV

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Tunnel Denial of Service Vulnerability

Cisco Cisco Secure Firewall Adaptive Security Appliance (ASA) Software; Cisco Cisco Secure Firewall Threat Defense (FTD) Software

A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unex…

5.3Medium
CVE-2026-76445

Multiple Cisco Products Snort 3 Denial of Service Vulnerability

Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

Multiple Cisco products are affected by a vulnerability in the Snort 3 Detection Engine that could allow an unauthenticated, remote attacker to cause the detection engine to unexpectedly restart, resulting in a denial of service (DoS) condition. The vulner…

7.5High
CVE-2026-20356

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Cisco Cyber Vision; Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that add…

7.5High
CVE-2026-20236

Multiple Cisco Products Snort 3 Software Hardening Release: October 2026

Cisco Cisco Cyber Vision; Cisco Cisco Open Source Snort3; Cisco Cisco Secure Firewall Threat Defense (FTD) Software; Cisco Cisco UTD SNORT IPS Engine Software

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco owned Open Source Snort 3 Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that add…