Login Request a demo
Medium severity · published Oct 12, 2017
CVE-2015-6358
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection…
5.9
CVSS
1.3%
EPSS
No
On KEV
Description
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pvc2300 Firmware · Cisco
through 1.1.2.6 · source: NVD
RF
Rtp300 Firmware · Cisco
through 3.1.24 · source: NVD
RF
Rv120w Firmware · Cisco
through 1.0.5.9 · source: NVD
RF
Rv180 Firmware · Cisco
through 1.0.5.4 · source: NVD
RF
Rv180w Firmware · Cisco
through 1.0.5.4 · source: NVD
RF
Rv220w Firmware · Cisco
through 1.0.4.17 · source: NVD
RF
Rv315w Firmware · Cisco
through 1.01.03 · source: NVD
RF
Rv320 Firmware · Cisco
through 1.3.1.10 · source: NVD
RF
Rv325 Firmware · Cisco
through 1.3.1.10 · source: NVD
RF
Rvs4000 Firmware · Cisco
through 2.0.3.4 · source: NVD
SF
Spa400 Firmware · Cisco
through 1.1.2.2 · source: NVD
SF
Srp520 Firmware · Cisco
through 1.01.29 · source: NVD
Affected product
PF
Pvc2300 Firmware
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-6358
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-6358
Issue Tracking
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-ci
Third Party Advisory
http://www.kb.cert.org/vuls/id/566724
Third Party Advisory
http://www.securityfocus.com/bid/78047
Third Party Advisory
http://www.securitytracker.com/id/1034255
Third Party Advisory
http://www.securitytracker.com/id/1034256
Third Party Advisory
http://www.securitytracker.com/id/1034257