CVE-2015-6397

Severity: high (CVSS 8.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-08-08 · updated 2026-06-17
Weakness: CWE-287

Description

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.

Affected products

Cisco RV110W Wireless-N VPN Firewall Firmware: all versions
Cisco Rv130W Wireless-N Multifunction Vpn Router Firmware: all versions
Cisco Rv215W Wireless-N Vpn Router Firmware: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2
http://www.securityfocus.com/bid/92273
http://www.securitytracker.com/id/1036524
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w2
http://www.securityfocus.com/bid/92273
http://www.securitytracker.com/id/1036524

Get alerted when CVE-2015-6397 or the next vulnerability affects your stack