Cisco Rvs4000 Firmware vulnerabilities

2 known vulnerabilities affecting cisco/rvs4000_firmware.

Total CVEs

2

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

CRITICAL1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2015-6358MEDIUMCVSS 5.9≤ 2.0.3.42017-10-12

CVE-2015-6358 [MEDIUM] CWE-295 CVE-2015-6358: Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the f Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637,

CVE-2014-0659CRITICALCVSS 10.0PoC≤ 2.0.3.2v1.3.2.0+3 more2014-01-12

CVE-2014-0659 [CRITICAL] CWE-78 CVE-2014-0659: The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x th The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote attackers to read credential and configuration data, and execute arbitrary commands, via requests to the test interface on TCP port 32764, aka Bug IDs C