CVE-2015-6396

7.8 HIGH

Published: August 08, 2016 Modified: May 06, 2026

Description

The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1

Source: psirt@cisco.com

Mitigation Vendor Advisory

http://www.securityfocus.com/bid/92269

Source: psirt@cisco.com

http://www.securitytracker.com/id/1036528

Source: psirt@cisco.com

https://www.exploit-db.com/exploits/45986/

Source: psirt@cisco.com

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1

Source: af854a3a-2127-422b-91ae-364da2661108

Mitigation Vendor Advisory

http://www.securityfocus.com/bid/92269

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id/1036528

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/45986/

Source: af854a3a-2127-422b-91ae-364da2661108

8 reference(s) from NVD

Quick Stats

CVSS v3 Score

7.8 / 10.0

EPSS (Exploit Probability)

2.4%

85th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-78

Affected Vendors

cisco

Related CVEs