Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2023-05-19
• EPSS: 88% chance of exploitation in the next 30 days (higher than 100% of CVEs)

[ Description ]Official description

The server IKEv1 implementation in Cisco IOS 12.2 through 12.4 and 15.0 through 15.6, IOS XE through 3.18S, IOS XR 4.3.x and 5.0.x through 5.2.x, and PIX before 7.0 allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request, aka Bug IDs CSCvb29204 and CSCvb36055 or BENIGNCERTAIN.

CISA: Cisco IOS, IOS XR, and IOS XE contain insufficient condition checks in the part of the code that handles Internet Key Exchange version 1 (IKEv1) security negotiation requests. contains an information disclosure vulnerability in the Internet Key Exchange version 1 (IKEv1) that could allow an attacker to retrieve memory contents. Successful exploitation could allow the attacker to retrieve memory contents, which can lead to information disclosure.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 9 Jun 2023): Apply updates per vendor instructions.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160916-ikev1Vendor Advisory
• www.securityfocus.com/bid/93003Third Party AdvisoryVDB Entry
• www.securitytracker.com/id/1036841Third Party AdvisoryVDB Entry
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource