Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Jun 9, 2023

High
CISA KEV

CVE-2016-6415

CiscoIOS, IOS XR, and IOS XE

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

Required Action

https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1; https://nvd.nist.gov/vuln/detail/CVE-2016-6415

Vulnerability Overview

Severity
High
CISA KEV
Yes
Ransomware
Unknown
Published
May 19, 2023
KEV Added
May 19, 2023
Due Date
Jun 9, 2023
Related Articles
0

Vendor

Cisco

IOS, IOS XR, and IOS XE