CVE-2016-6398

Severity: medium (CVSS 5.3 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-09-12 · updated 2026-06-17
Weakness: CWE-200

Description

The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.

Affected products

Cisco IOS: 15.5(3)m

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios
http://www.securityfocus.com/bid/92734
http://www.securitytracker.com/id/1036732
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios
http://www.securityfocus.com/bid/92734
http://www.securitytracker.com/id/1036732

Get alerted when CVE-2016-6398 or the next vulnerability affects your stack