Lucene search

K
cvelistCiscoCVELIST:CVE-2015-6358
HistoryOct 12, 2017 - 3:00 p.m.

CVE-2015-6358

2017-10-1215:00:00
cisco
www.cve.org

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

5.9 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.5%

Related for CVELIST:CVE-2015-6358