CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

Vereiste actie (tekst van CISA, Engels)

Apply updates per vendor instructions.

Beschrijving (NVD, Engels)

Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

BRONNEN

• CISA KEVCISA Known Exploited Vulnerabilities catalog

Andere lekken bij Cisco

• CVE-2026-20320: Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
• CVE-2026-76418: Cisco Secure Firewall ASA Software and Cisco Secure FTD Software Unchecked Return Value to NULL Pointer Dereference Vulnerability
• CVE-2026-76519: Cisco Secure Email Gateway Relative Path Traversal Vulnerability
• CVE-2026-76504: Cisco Catalyst SD-WAN Manager Hex Encoding Vulnerability
• CVE-2026-76460: Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability

Gegevens van NVD, CISA KEV, FIRST EPSS en adviezen van leveranciers. Bijgewerkt 10 nov 2026.