Cisco IKEv1 Information Disclosure (BENIGNCERTAIN; CVE-2016-6415)

A vulnerability exists in IKEv1 packet processing code in Cisco IOS, Cisco IOS XE and Cisco IOS XR Software. The vulnerability , known as Pix Pocket, is due to insufficient condition checks in the IKEv1 security negotiation requests. A successful could cause disclosure of confidential information.

Leave a Reply