CVE-2016-6398

medium

Description

The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.

References

http://www.securitytracker.com/id/1036732

http://www.securityfocus.com/bid/92734

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160902-ios

Details

Source: Mitre, NVD

Published: 2016-09-12

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N