high8.8
CVE-2015-6397
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root a…
Impact
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Rv110w Wireless-N Vpn Firewall Firmware | All versions |
| Cisco | Rv130w Wireless-N Multifunction Vpn Router Firmware | All versions |
| Cisco | Rv215w Wireless-N Vpn Router Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2
- http://www.securityfocus.com/bid/92273
- http://www.securitytracker.com/id/1036524
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2
- http://www.securityfocus.com/bid/92273
- http://www.securitytracker.com/id/1036524