What is the CVSS score of CVE-2015-6358?

CVE-2015-6358 has a CVSS 3.0 base score of 5.9 (Medium). CVSS vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N. EPSS exploitation probability: 2.0%.

Is there a patch available for CVE-2015-6358?

Yes, a patch is available for CVE-2015-6358. Update the affected software to the latest version immediately.

Rvs4000 Firmware CVE-2015-6358

MEDIUM

Improper Certificate Validation (CWE-295)

2017-10-12 psirt@cisco.com

Information Disclosure Cisco Rvs4000 Firmware Wrvs4400N Firmware Wap4410N Firmware Rv120W Firmware Rv220W Firmware Rv180 Firmware Rv320 Firmware Rv325 Firmware Wrv210 Firmware Wrv200 Firmware Wap200 Firmware Wvc2300 Firmware Pvc2300 Firmware Srw224P Firmware Wet200 Firmware Wap2000 Firmware Wap4400N Firmware Rv180W Firmware Rv315W Firmware Srp520 Firmware Srp520 U Firmware Wrp500 Firmware Spa400 Firmware Rtp300 Firmware

5.9

CVSS 3.0 · NVD

Severity by source

NVD PRIMARY

5.9 MEDIUM

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

CVE Published

Oct 12, 2017 - 15:29 cve.org

MEDIUM 5.9

DescriptionCVE.org

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-295. Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913. Affected products include: Cisco Rv320 Firmware, Cisco Rv325 Firmware, Cisco Rvs4000 Firmware, Cisco Wrv210 Firmware, Cisco Wap4410N Firmware.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.