CVE-2015-6397

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.

Score

CVSS 3.0 8.8 High

Status

Modified - psirt@cisco.com

Published

2016-08-08

Last modified

2024-08-06

Weaknesses

CWE-287

Affected products

• Rv110w Wireless-n Vpn Firewall Firmware (Cisco)
• Rv130w Wireless-n Multifunction Vpn Router Firmware (Cisco)
• Rv215w Wireless-n Vpn Router Firmware (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2
• http://www.securityfocus.com/bid/92273
• http://www.securitytracker.com/id/1036524