CVE-2015-6397

High

Published: 08/08/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, allowing remote authenticated users to obtain root access via a login session with that account.

Risk Assessment

The incorrect RBAC configuration poses a risk of unauthorized access to the system, potentially leading to serious security breaches within the organization.

Recommendation

It is recommended to review and correct the RBAC configuration for the default account to minimize the risk of unauthorized access.

Other vulnerabilities in Cisco RV110W, RV130W, RV215W

CVE-2015-6396High
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters.

Original NVD description (English source)

Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that account, aka Bug IDs CSCuv90139, CSCux58175, and CSCux73557.