High severity7.5CISA KEVNVD Advisory· Published Sep 19, 2016· Updated Jun 17, 2026
CVE-2016-6415
CVE-2016-6415
Description
The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*range: >=12.2,<=12.4
- (no CPE)range: 12.2 through 12.4, 15.0 through 15.6
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*range: <=3.18s
- (no CPE)range: through 3.18S
cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*range: >=4.3.0,<=4.3.4
- (no CPE)range: 4.3.x and 5.0.x through 5.2.x
- Range: before 7.0
Patches
Vulnerability mechanics
References
4- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1nvdVendor Advisory
- www.securityfocus.com/bid/93003nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1036841nvdThird Party AdvisoryVDB Entry
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.