CVE-2016-6438

A vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could allow an unauthenticated, remote attacker to cause a configuration integrity change to the vty line configuration on an affected device. This vulnerability affects the following releases of Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers: All 3.16S releases, All 3.17S releases, Release 3.18.0S, Release 3.18.1S, Release 3.18.0SP. More Information: CSCuz62815. Known Affected Releases: 15.5(3)S2.9, 15.6(2)SP. Known Fixed Releases: 15.6(1.7)SP1, 16.4(0.183), 16.5(0.1).

• CWE-264

• http://www.securityfocus.com/bid/93518
• http://www.securitytracker.com/id/1037003
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-cbr-8Vendor Advisory
• http://www.securityfocus.com/bid/93518
• http://www.securitytracker.com/id/1037003
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161012-cbr-8Vendor Advisory

Published

Oct 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6432A vulnerability in the Identity Firewall feature of Cisco AS…
• CVE-2016-6433The Threat Management Console in Cisco Firepower Management …8.8
• CVE-2016-6434Cisco Firepower Management Center 6.0.1 has hardcoded databa…
• CVE-2016-6435The web console in Cisco Firepower Management Center 6.0.1 a…
• CVE-2016-6436Cross-site scripting (XSS) vulnerability in HostScan Engine …
• CVE-2016-6437A vulnerability in the SSL session cache management of Cisco…
• CVE-2016-6439A vulnerability in the detection engine reassembly of HTTP p…
• CVE-2016-6440The Cisco Unified Communications Manager (CUCM) may be vulne…
• CVE-2016-6441A vulnerability in the Transaction Language 1 (TL1) code of …
• CVE-2016-6442A vulnerability in Cisco Finesse Agent and Supervisor Deskto…
• CVE-2016-6443A vulnerability in the Cisco Prime Infrastructure and Evolve…
• CVE-2016-6444A vulnerability in Cisco Meeting Server could allow an unaut…