CVEvulnerability
CVE-2015-6396
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-08-08
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-78
Description
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.
Affected configurations
• cisco rv110w wireless-n vpn firewall firmware
• cisco rv130w wireless-n multifunction vpn router firmware
• cisco rv215w wireless-n vpn router firmware
Related
Weakness · CWE (1)
- CWE-78 Improper Neutralization of Special Elements used in an OS Command weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/92269 www.securityfocus.com
- http://www.securitytracker.com/id/1036528 www.securitytracker.com
- https://www.exploit-db.com/exploits/45986/ www.exploit-db.com
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1 Mitigation, Vendor Advisory
- http://www.securityfocus.com/bid/92269 www.securityfocus.com
- http://www.securitytracker.com/id/1036528 www.securitytracker.com
- https://www.exploit-db.com/exploits/45986/ www.exploit-db.com