BLACKOUT MAP

Cisco · IOS, IOS XR, and IOS XE

CVE-2016-6415

Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

공격에 악용됨 높음 7.5 공격 가능성: 88%
공유

무엇인가

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.

CISA: Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

할 일

Apply updates per vendor instructions.

미국 연방 기관 조치 기한: 2023년 6월 9일

CISA 목록에 추가됨
2023년 5월 19일
게시됨
2016년 9월 19일
심각도
높음 7.5 CVSS 3.1
향후 30일 내 공격 가능성(EPSS)
88% 알려진 모든 취약점 중 상위 0.2%
약점 유형
CWE-200
자세히
NVD · CVE.org · CISA
모든 참고 자료(3)

Cisco의 다른 악용된 결함

추가됨취약점제품심각도공격 가능성
2026. 10. 14.Relative Path TraversalCVE-2026-76519Secure Email Gateway치명적 9.82.2%
2026. 9. 30.Hex EncodingCVE-2026-76504Catalyst SD-WAN Manager치명적 9.839%
2026. 9. 16.Incorrect Use of Privileged APIsCVE-2026-76460Identity Services Engine치명적 10.076%
2026. 9. 14.SQL InjectionCVE-2026-76461Secure Email Gateway치명적 9.830%
2026. 9. 9.Firewall Management Center Authentication Bypass Using an Alternate Path or ChannelCVE-2026-20079Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management치명적 10.088%
2026. 8. 11.Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap InspectionCVE-2026-20349Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) 높음 8.61.0%
2026. 7. 29.Secure Firewall Management Center Use of Hard-coded PasswordCVE-2026-20316랜섬웨어에 사용됨Secure Firewall Management Center (FMC)보통 5.335%
2026. 7. 13.Cross-Site Request ForgeryCVE-2008-4128IOS높음 8.134%

모두 →

출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.