CVE Feed

    Dashboard / CVE / CVE-2015-6358

    CVE-2015-6358

    Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

    Published:Oct 12, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 12, 2017
    EPSS Score:0.01967
    CVSS Score:5.9

    Affected Products

    Vendor
    Cisco
    Product
    Pvc2300
    Vendor
    Cisco
    Product
    Pvc2300 Firmware
    Vendor
    Cisco
    Product
    Rtp300
    Vendor
    Cisco
    Product
    Rtp300 Firmware
    Vendor
    Cisco
    Product
    Rv120w
    Vendor
    Cisco
    Product
    Rv120w Firmware
    Vendor
    Cisco
    Product
    Rv180
    Vendor
    Cisco
    Product
    Rv180 Firmware
    Vendor
    Cisco
    Product
    Rv180w
    Vendor
    Cisco
    Product
    Rv180w Firmware
    Vendor
    Cisco
    Product
    Rv220w
    Vendor
    Cisco
    Product
    Rv220w Firmware
    Vendor
    Cisco
    Product
    Rv315w
    Vendor
    Cisco
    Product
    Rv315w Firmware
    Vendor
    Cisco
    Product
    Rv320
    Vendor
    Cisco
    Product
    Rv320 Firmware
    Vendor
    Cisco
    Product
    Rv325
    Vendor
    Cisco
    Product
    Rv325 Firmware
    Vendor
    Cisco
    Product
    Rvs4000
    Vendor
    Cisco
    Product
    Rvs4000 Firmware
    Vendor
    Cisco
    Product
    Spa400
    Vendor
    Cisco
    Product
    Spa400 Firmware
    Vendor
    Cisco
    Product
    Srp520
    Vendor
    Cisco
    Product
    Srp520-u
    Vendor
    Cisco
    Product
    Srp520-u Firmware
    Vendor
    Cisco
    Product
    Srp520 Firmware
    Vendor
    Cisco
    Product
    Srw224p
    Vendor
    Cisco
    Product
    Srw224p Firmware
    Vendor
    Cisco
    Product
    Wap200
    Vendor
    Cisco
    Product
    Wap2000
    Vendor
    Cisco
    Product
    Wap2000 Firmware
    Vendor
    Cisco
    Product
    Wap200 Firmware
    Vendor
    Cisco
    Product
    Wap4400n
    Vendor
    Cisco
    Product
    Wap4400n Firmware
    Vendor
    Cisco
    Product
    Wap4410n
    Vendor
    Cisco
    Product
    Wap4410n Firmware
    Vendor
    Cisco
    Product
    Wet200
    Vendor
    Cisco
    Product
    Wet200 Firmware
    Vendor
    Cisco
    Product
    Wrp500
    Vendor
    Cisco
    Product
    Wrp500 Firmware
    Vendor
    Cisco
    Product
    Wrv200
    Vendor
    Cisco
    Product
    Wrv200 Firmware
    Vendor
    Cisco
    Product
    Wrv210
    Vendor
    Cisco
    Product
    Wrv210 Firmware
    Vendor
    Cisco
    Product
    Wrvs4400n
    Vendor
    Cisco
    Product
    Wrvs4400n Firmware
    Vendor
    Cisco
    Product
    Wvc2300
    Vendor
    Cisco
    Product
    Wvc2300 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High