← Back to CVE List
Vulnerability Intelligence Report

CVE-2015-6358

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

No Active Exploit Signals
CVSS Base Score
5.9
MEDIUM
EPSS Probability:1.31%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—

Affected Products & Versions

Vendor Product Affected Versions
cisco rv320_firmware all
cisco rv320 all
cisco rv325_firmware all
cisco rv325 all
cisco rvs4000_firmware all
cisco rvs4000 all
cisco wrv210_firmware all
cisco wrv210 all
cisco wap4410n_firmware all
cisco wap4410n all
cisco wrv200_firmware 1.0.39
cisco wrv200 all
cisco wrvs4400n_firmware all
cisco wrvs4400n all
cisco wap200_firmware all
cisco wap200 all
cisco wvc2300_firmware all
cisco wvc2300 all
cisco pvc2300_firmware all
cisco pvc2300 all
cisco srw224p_firmware all
cisco srw224p all
cisco wet200_firmware all
cisco wet200 all
cisco wap2000_firmware all
cisco wap2000 all
cisco wap4400n_firmware all
cisco wap4400n all
cisco rv120w_firmware all
cisco rv120w all
cisco rv180_firmware all
cisco rv180 all
cisco rv180w_firmware all
cisco rv180w all
cisco rv315w_firmware all
cisco rv315w all
cisco srp520_firmware all
cisco srp520 all
cisco srp520-u_firmware all
cisco srp520-u all
cisco wrp500_firmware all
cisco wrp500 all
cisco spa400_firmware all
cisco spa400 all
cisco rtp300_firmware all
cisco rtp300 all
cisco rv220w_firmware all
cisco rv220w all

References & Technical Advisories

No reference links found.

Threat Intelligence Signals

EPSS Score
1.305%

Identity & Timeline

StatusPUBLISHED
Assigning AuthorityCisco Systems, Inc. · Hosted Service · USA
Reserved2015-08-17T00:00:00
Published2017-10-12T15:00:00
Patch Date2015-11-25
Last Updated2024-08-06T07:22:20

LINK COPIED TO CLIPBOARD