NetSight
IP …
medium5.9

CVE-2015-6358

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptograp…

Impact

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

Affected products

VendorProductAffected versions
CiscoRv320 Firmware
through 1.3.1.10
CiscoRv325 Firmware
through 1.3.1.10
CiscoRvs4000 Firmware
through 2.0.3.4
CiscoWrv210 Firmware
through 2.0.1.5
CiscoWap4410n Firmware
through 2.0.7.8
CiscoWrv200 Firmware
Version 1.0.39
CiscoWrvs4400n Firmware
through 2.0.2.2
CiscoWap200 Firmware
through 2.0.6.0
CiscoWvc2300 Firmware
through 1.1.2.6
CiscoPvc2300 Firmware
through 1.1.2.6
CiscoSrw224p Firmware
through 2.0.2.4
CiscoWet200 Firmware
through 2.0.8.0

Weakness classification

CWE-295

References