CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2015-6396
High (7.8) in cisco. EPSS 1.6% chance of exploitation in the next 30 days.
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.
Severity
- EPSS
- 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
- CWE
- CWE-78
- Published
- Modified
- Record from
- the NVD, synced
Affected
- cisco:rv110w_wireless-n_vpn_firewall_firmware
- cisco:rv130w_wireless-n_multifunction_vpn_router_firmware
- cisco:rv215w_wireless-n_vpn_router_firmware
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1
- http://www.securityfocus.com/bid/92269
- http://www.securitytracker.com/id/1036528
- https://www.exploit-db.com/exploits/45986/
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1