NetSight
IP …
medium4.3

CVE-2015-6418

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier…

Impact

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

Affected products

VendorProductAffected versions
CiscoSa520
Version 2.2.07
CiscoSa520w
Version 2.2.07
CiscoSa540
Version 2.2.07
CiscoRv016 Multi-Wan Vpn Firmware
Versions 4.0.0.7, 4.0.2.8, 4.0.5.0
CiscoRv042 Dual Wan Vpn Router Firmware
Version 4.0.2.8
CiscoRv042g Dual Gigabit Wan Vpn Firmware
Versions 4.0.0.7, 4.2.2.7, 4.2.2.8
CiscoRv082 Dual Wan Vpn Router Firmware
Versions 4.0.0.7, 4.0.2.8

Weakness classification

CWE-200

References