Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-6397
HistoryAug 08, 2016 - 12:59 a.m.

CVE-2015-6397

2016-08-0800:59:01
CWE-287
[email protected]
web.nvd.nist.gov
6

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.

Affected configurations

Nvd
Node
ciscorv110w_wireless-n_vpn_firewall_firmware
AND
ciscorv110w_wireless-n_vpn_firewallMatch-
Node
ciscorv130w_wireless-n_multifunction_vpn_router_firmware
AND
ciscorv130w_wireless-n_multifunction_vpn_routerMatch-
Node
ciscorv215w_wireless-n_vpn_router_firmware
AND
ciscorv215w_wireless-n_vpn_routerMatch-
VendorProductVersionCPE
ciscorv110w_wireless-n_vpn_firewall_firmware*cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:*:*:*:*:*:*:*:*
ciscorv110w_wireless-n_vpn_firewall-cpe:2.3:h:cisco:rv110w_wireless-n_vpn_firewall:-:*:*:*:*:*:*:*
ciscorv130w_wireless-n_multifunction_vpn_router_firmware*cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:*:*:*:*:*:*:*:*
ciscorv130w_wireless-n_multifunction_vpn_router-cpe:2.3:h:cisco:rv130w_wireless-n_multifunction_vpn_router:-:*:*:*:*:*:*:*
ciscorv215w_wireless-n_vpn_router_firmware*cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:*:*:*:*:*:*:*:*
ciscorv215w_wireless-n_vpn_router-cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*

Related

prion 1
cisco 1
openvas 1
cve 1
cvelist 1
prion
prion
Default configuration
2016-08-08 00:59:00
cisco
cisco
Cisco RV110W, RV130W, and RV215W Routers Static Credential Vulnerability
2016-08-03 16:00:00
openvas
openvas
Cisco RV110W, RV130W, and RV215W Routers Static Credential Vulnerability (cisco-sa-20160803-rv110_130w2)
2016-08-05 00:00:00
cve
cve
CVE-2015-6397
2016-08-08 00:59:01
cvelist
cvelist
CVE-2015-6397
2016-08-08 00:00:00

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.4

Confidence

High

EPSS

0.002

Percentile

64.8%

JSON
Related for NVD:CVE-2015-6397
prion1cisco1openvas1cve1cvelist1