Unscored CVE-2015-6397 EUVD-2015-6339GHSA-7m9q-532f-6q43

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated us…

Published Aug 8, 2016 · Updated Aug 6, 2024 · Assigned by cisco

Description

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.

References

92273 vdb-entry
20160803 Cisco RV110W, RV130W, and RV215W Routers Static Credential Vulnerability vendor-advisory
1036524 vdb-entry