CVE-2016-6438 Missing authorization in Cisco IOS XE 3.16S, 3.17S, 3.18.0S, 3.18.1S, 3.18.0SP

Medium 5.9 Published 27 Oct 2016 Updated 6 Aug 2024

Unauthenticated remote attackers can modify vty line configuration on Cisco cBR-8 routers, compromising device integrity.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2016-6438?

CVE-2016-6438 is a medium-severity missing authorization vulnerability in Cisco Ios Xe, published on 27 Oct 2016. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers: All 3.16S releases, All 3.17S releases, Release 3.18.0S, Release 3.18.1S, Release 3.18.0SP. More Information: CSCuz62815. Known Affected Releases: 15.5(3)S2.9, 15.6(2)SP. Known Fixed Releases: 15.6(1.7)SP1, 16.4(0.183), 16.5(0.1).

Weakness: CWE-264

Which versions are affected by CVE-2016-6438?

It affects 1 product.

Products include Cisco Ios Xe.

How do I fix CVE-2016-6438?

No fix has been published for CVE-2016-6438 yet. Limit exposure of the affected software until one is available.

Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.

Is CVE-2016-6438 being exploited?

There is no known exploitation of CVE-2016-6438 in the wild and no public exploit code.

All Cisco Ios Xe vulnerabilities

Sources

Also known as GHSA-65gc-9jw6-hwxx.