7.5

CVE-2016-6415: Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

CVSS: 7.5v3.1HighKEVAnalyzed
Published 19-09-2016Last modified 12-01-2026
Open JSON

Vulnerability summary

CVE-2016-6415 is a high (CVSS 7.5) vulnerability in Cisco IOS, IOS XR, and IOS XE. It is known to be exploited: CISA lists it, first on 19-05-2023. EPSS estimates a 87.69% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
87.69%
0%100%
Critical · 0.00 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits2metasploit, exploit-database

Timeline

  1. 19-09-2016
    PublishedVulnerability first disclosed.
  2. 19-05-2023
    Added to CISA KEVCisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability
  3. 09-06-2023
    CISA remediation dueApply updates per vendor instructions.
  4. 12-01-2026
    Last modifiedVulnerability information updated.

Description

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.

CVSS metrics

3 scores · 2 sources · 2 versions

EPSS trend

Probability

87.69%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 87.69% on 21-09-2026

21-09-202621-10-2026
EPSS score
87.69%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
19-05-2023
Federal due date
09-06-2023

CISA required action

Apply updates per vendor instructions. sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1 nvd.nist.gov/vuln/detail/CVE-2016-6415

Public exploits

2 found
  • MetasploitMetasploitremoteUnverified

    Cisco IKE Information Disclosure

    auxiliary/scanner/ike/cisco_ike_benigncertain

    Maturity: poc

  • exploit-databaseremotehardwareUnverified

    Cisco IOS 12.2 < 12.4 / 15.0 < 15.6 - Security Association Negotiation Request Device Memory

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Cisco3 products
  • ios≥ 12.2, ≤ 12.4 | ≥ 15.0, ≤ 15.6
  • ios_xe≤ 3.18s
  • ios_xr≥ 4.3.0, ≤ 4.3.4 | ≥ 5.0.0, < 5.3.0

1 vendor · 3 products

References

4 links