CVE-2015-6396

High

Published: 08/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the system and potential takeover of the device by local users.

Recommendation

It is recommended to update the device firmware to the latest version to mitigate the risks associated with this vulnerability.

Other vulnerabilities in Cisco RV110W, RV130W, RV215W

CVE-2015-6397High
Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, allowing remote authenticated users to obtain root access via a login session with that account.

Original NVD description (English source)

The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.