CVE-2015-6358
Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.
Published:Oct 12, 2017
Last Modified:Apr 20, 2025
EPS:Oct 12, 2017
EPSS Score:0.01967
CVSS Score:5.9
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Pvc2300
Cisco
Pvc2300
Vendor
Cisco
Product
Pvc2300 Firmware
Cisco
Pvc2300 Firmware
Vendor
Cisco
Product
Rtp300
Cisco
Rtp300
Vendor
Cisco
Product
Rtp300 Firmware
Cisco
Rtp300 Firmware
Vendor
Cisco
Product
Rv120w
Cisco
Rv120w
Vendor
Cisco
Product
Rv120w Firmware
Cisco
Rv120w Firmware
Vendor
Cisco
Product
Rv180
Cisco
Rv180
Vendor
Cisco
Product
Rv180 Firmware
Cisco
Rv180 Firmware
Vendor
Cisco
Product
Rv180w
Cisco
Rv180w
Vendor
Cisco
Product
Rv180w Firmware
Cisco
Rv180w Firmware
Vendor
Cisco
Product
Rv220w
Cisco
Rv220w
Vendor
Cisco
Product
Rv220w Firmware
Cisco
Rv220w Firmware
Vendor
Cisco
Product
Rv315w
Cisco
Rv315w
Vendor
Cisco
Product
Rv315w Firmware
Cisco
Rv315w Firmware
Vendor
Cisco
Product
Rv320
Cisco
Rv320
Vendor
Cisco
Product
Rv320 Firmware
Cisco
Rv320 Firmware
Vendor
Cisco
Product
Rv325
Cisco
Rv325
Vendor
Cisco
Product
Rv325 Firmware
Cisco
Rv325 Firmware
Vendor
Cisco
Product
Rvs4000
Cisco
Rvs4000
Vendor
Cisco
Product
Rvs4000 Firmware
Cisco
Rvs4000 Firmware
Vendor
Cisco
Product
Spa400
Cisco
Spa400
Vendor
Cisco
Product
Spa400 Firmware
Cisco
Spa400 Firmware
Vendor
Cisco
Product
Srp520
Cisco
Srp520
Vendor
Cisco
Product
Srp520-u
Cisco
Srp520-u
Vendor
Cisco
Product
Srp520-u Firmware
Cisco
Srp520-u Firmware
Vendor
Cisco
Product
Srp520 Firmware
Cisco
Srp520 Firmware
Vendor
Cisco
Product
Srw224p
Cisco
Srw224p
Vendor
Cisco
Product
Srw224p Firmware
Cisco
Srw224p Firmware
Vendor
Cisco
Product
Wap200
Cisco
Wap200
Vendor
Cisco
Product
Wap2000
Cisco
Wap2000
Vendor
Cisco
Product
Wap2000 Firmware
Cisco
Wap2000 Firmware
Vendor
Cisco
Product
Wap200 Firmware
Cisco
Wap200 Firmware
Vendor
Cisco
Product
Wap4400n
Cisco
Wap4400n
Vendor
Cisco
Product
Wap4400n Firmware
Cisco
Wap4400n Firmware
Vendor
Cisco
Product
Wap4410n
Cisco
Wap4410n
Vendor
Cisco
Product
Wap4410n Firmware
Cisco
Wap4410n Firmware
Vendor
Cisco
Product
Wet200
Cisco
Wet200
Vendor
Cisco
Product
Wet200 Firmware
Cisco
Wet200 Firmware
Vendor
Cisco
Product
Wrp500
Cisco
Wrp500
Vendor
Cisco
Product
Wrp500 Firmware
Cisco
Wrp500 Firmware
Vendor
Cisco
Product
Wrv200
Cisco
Wrv200
Vendor
Cisco
Product
Wrv200 Firmware
Cisco
Wrv200 Firmware
Vendor
Cisco
Product
Wrv210
Cisco
Wrv210
Vendor
Cisco
Product
Wrv210 Firmware
Cisco
Wrv210 Firmware
Vendor
Cisco
Product
Wrvs4400n
Cisco
Wrvs4400n
Vendor
Cisco
Product
Wrvs4400n Firmware
Cisco
Wrvs4400n Firmware
Vendor
Cisco
Product
Wvc2300
Cisco
Wvc2300
Vendor
Cisco
Product
Wvc2300 Firmware
Cisco
Wvc2300 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
