[email protected]CVE-2015-6418

HistoryDec 13, 2015 - 3:59 a.m.

CVE-2015-6418

2015-12-1303:59:00

CWE-200

[email protected]

web.nvd.nist.gov

cisco

small business

rv routers

sa500

security appliances

vulnerability

cve-2015-6418

nvd

tls

key pair

entropy

6.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.4%

JSON

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

CPENameOperatorVersion
cisco:sa520cisco sa520eq2.2.07
cisco:sa540cisco sa540eq2.2.07
cisco:sa520wcisco sa520weq2.2.07
cisco:rv042g_dual_gigabit_wan_vpn_firmwarecisco rv042g dual gigabit wan vpn firmwareeq4.0.0.7
cisco:rv082_dual_wan_vpn_router_firmwarecisco rv082 dual wan vpn router firmwareeq4.0.0.7
cisco:rv082_dual_wan_vpn_router_firmwarecisco rv082 dual wan vpn router firmwareeq4.0.2.8
cisco:rv016_multi-wan_vpn_firmwarecisco rv016 multi-wan vpn firmwareeq4.0.0.7
cisco:rv016_multi-wan_vpn_firmwarecisco rv016 multi-wan vpn firmwareeq4.0.2.8
cisco:rv042g_dual_gigabit_wan_vpn_firmwarecisco rv042g dual gigabit wan vpn firmwareeq4.2.2.7
cisco:rv042_dual_wan_vpn_router_firmwarecisco rv042 dual wan vpn router firmwareeq4.0.2.8

CPE	Name	Operator	Version
cisco:sa520	cisco sa520	eq	2.2.07
cisco:sa540	cisco sa540	eq	2.2.07
cisco:sa520w	cisco sa520w	eq	2.2.07
cisco:rv042g_dual_gigabit_wan_vpn_firmware	cisco rv042g dual gigabit wan vpn firmware	eq	4.0.0.7
cisco:rv082_dual_wan_vpn_router_firmware	cisco rv082 dual wan vpn router firmware	eq	4.0.0.7
cisco:rv082_dual_wan_vpn_router_firmware	cisco rv082 dual wan vpn router firmware	eq	4.0.2.8
cisco:rv016_multi-wan_vpn_firmware	cisco rv016 multi-wan vpn firmware	eq	4.0.0.7
cisco:rv016_multi-wan_vpn_firmware	cisco rv016 multi-wan vpn firmware	eq	4.0.2.8
cisco:rv042g_dual_gigabit_wan_vpn_firmware	cisco rv042g dual gigabit wan vpn firmware	eq	4.2.2.7
cisco:rv042_dual_wan_vpn_router_firmware	cisco rv042 dual wan vpn router firmware	eq	4.0.2.8

Rows per page:

1-10 of 121

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-dwvr

www.securityfocus.com/bid/78876

www.securitytracker.com/id/1034408

www.securitytracker.com/id/1034409

6.9 Medium

AI Score

Confidence

Low

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

0.003 Low

EPSS

Percentile

70.4%

JSON

Related for CVE-2015-6418

prion1 cvelist1 cisco1