CVE-2015-6397: Critical severity cisco rv110w wireless-n vpn firewall firmware vulnerability
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-6397?
CVE-2015-6397 is classified as a high severity vulnerability due to the potential for remote authenticated users to gain root access.
How do I fix CVE-2015-6397?
To mitigate CVE-2015-6397, it is recommended to change the default account credentials and apply any available firmware updates from Cisco.
Which Cisco devices are affected by CVE-2015-6397?
CVE-2015-6397 affects the Cisco RV110W, RV130W, and RV215W devices due to an incorrect RBAC configuration.
Can CVE-2015-6397 be exploited remotely?
Yes, CVE-2015-6397 can be exploited remotely by authenticated users who can access the devices.
What are the consequences of exploiting CVE-2015-6397?
Exploiting CVE-2015-6397 can allow an attacker to obtain root-level access to the affected Cisco devices.