CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.
Other sources
Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CSCvb29204 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch CSCvb36055 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch BENIGNCERTAIN
Event History
Frequently Asked Questions
What is CVE-2016-6415?
CVE-2016-6415 is a vulnerability found in Cisco IOS, IOS XR, and IOS XE that allows an attacker to access sensitive information through IKEv1 security negotiation requests.
How does CVE-2016-6415 affect Cisco IOS, IOS XR, and IOS XE?
CVE-2016-6415 affects Cisco IOS, IOS XR, and IOS XE by exposing sensitive information due to insufficient condition checks in the code handling IKEv1 security negotiation requests.
What is IKEv1?
IKEv1 is the Internet Key Exchange version 1 protocol used for setting up secure communication channels in IPsec VPNs.
How can an attacker exploit CVE-2016-6415?
An attacker can exploit CVE-2016-6415 by sending malicious IKEv1 security negotiation requests to the affected Cisco devices, allowing them to access sensitive information.
How can I fix CVE-2016-6415?
To fix CVE-2016-6415, users should apply the recommended security patches provided by Cisco and ensure their Cisco IOS, IOS XR, and IOS XE software is up to date.