VULNERABILITY INTELLIGENCE
CVE-2016-6398
CVSS score5.3 MEDIUM
EPSS probability1.26%
CISA KEVNot currently listed
Published2016-09-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
The PPTP server in Cisco IOS 15.5(3)M does not properly initialize packet buffers, which allows remote attackers to obtain sensitive information from earlier network communication by reading packet data, aka Bug ID CSCvb16274.
Weakness classification
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor