CVE-2015-6358

🗓️ 12 Oct 2017 15:00:00Reported by ciscoType

cve

cve🔗 web.nvd.nist.gov👁 203 Views

Cisco devices use hardcoded X.509 certificates & SSH host keys allowing man-in-the-middle attacks

Reporter	Title	Published	Views	Family All 11
Cisco	Multiple Cisco Products Confidential Information Decryption Man-in-the-Middle Vulnerability	25 Nov 201521:30	–	cisco
CNVD	Information Disclosure Vulnerabilities in Multiple Cisco Products	29 Nov 201500:00	–	cnvd
Cvelist	CVE-2015-6358	12 Oct 201715:00	–	cvelist
EUVD	EUVD-2015-6300	7 Oct 202500:30	–	euvd
NVD	CVE-2015-6358	12 Oct 201715:29	–	nvd
OpenVAS	Known/Static SSH Host Key Used (TCP)	5 Jan 201600:00	–	openvas
OpenVAS	Cisco Small Business RV Series Confidential Information Decryption Man-in-the-Middle Vulnerability	15 Sep 201600:00	–	openvas
OpenVAS	SSL/TLS: Known Compromised/Static Certificate Detection	10 Nov 202100:00	–	openvas
Prion	Hardcoded credentials	12 Oct 201715:29	–	prion
Tenable Nessus	SSH Known Hard Coded Private Keys	8 Jan 201900:00	–	nessus

NVD

Node

cisco rv320_firmwareRange≤1.3.1.10

AND

cisco rv320Match-

Node

cisco rv325_firmwareRange≤1.3.1.10

AND

cisco rv325Match-

Node

cisco rvs4000_firmwareRange≤2.0.3.4

AND

cisco rvs4000Match-

Node

cisco wrv210_firmwareRange≤2.0.1.5

AND

cisco wrv210Match-

Node

cisco wap4410n_firmwareRange≤2.0.7.8

AND

cisco wap4410nMatch-

Node

cisco wrv200_firmwareMatch1.0.39

AND

cisco wrv200Match-

Node

cisco wrvs4400n_firmwareRange≤2.0.2.2

AND

cisco wrvs4400nMatch-

Node

cisco wap200_firmwareRange≤2.0.6.0

AND

cisco wap200Match-

Node

cisco wvc2300_firmwareRange≤1.1.2.6

AND

cisco wvc2300Match-

Node

cisco pvc2300_firmwareRange≤1.1.2.6

AND

cisco pvc2300Match-

Node

cisco srw224p_firmwareRange≤2.0.2.4

AND

cisco srw224pMatch-

Node

cisco wet200_firmwareRange≤2.0.8.0

AND

cisco wet200Match-

Node

cisco wap2000_firmwareRange≤2.0.8.0

AND

cisco wap2000Match-

Node

cisco wap4400n_firmwareRange≤-

AND

cisco wap4400nMatch-

Node

cisco rv120w_firmwareRange≤1.0.5.9

AND

cisco rv120wMatch-

Node

cisco rv180_firmwareRange≤1.0.5.4

AND

cisco rv180Match-

Node

cisco rv180w_firmwareRange≤1.0.5.4

AND

cisco rv180wMatch-

Node

cisco rv315w_firmwareRange≤1.01.03

AND

cisco rv315wMatch-

Node

cisco srp520_firmwareRange≤1.01.29

AND

cisco srp520Match-

Node

cisco srp520-u_firmwareRange≤1.2.6

AND

cisco srp520-uMatch-

Node

cisco wrp500_firmwareRange≤1.0.1.002

AND

cisco wrp500Match-

Node

cisco spa400_firmwareRange≤1.1.2.2

AND

cisco spa400Match-

Node

cisco rtp300_firmwareRange≤3.1.24

AND

cisco rtp300Match-

Node

cisco rv220w_firmwareRange≤1.0.4.17

AND

cisco rv220wMatch-

Source	Link
kb	www.kb.cert.org/vuls/id/566724
securityfocus	www.securityfocus.com/bid/78047
securitytracker	www.securitytracker.com/id/1034258
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-ci
securitytracker	www.securitytracker.com/id/1034256
securitytracker	www.securitytracker.com/id/1034257
securitytracker	www.securitytracker.com/id/1034255

13 May 2026 00:24Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

CVSS 35.9

EPSS0.01998

cisco x.509 certificates ssh man-in-the-middle cve-2015-6358 nvd cybersecurity