Medium severity5.9NVD Advisory· Published Oct 12, 2017· Updated Jun 17, 2026

CVE-2015-6358

Description

Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Cisco Systems, Inc./Pvc2300 Firmware
cpe:2.3:o:cisco:pvc2300_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.2.6
Cisco Systems, Inc./Rtp300 Firmware
cpe:2.3:o:cisco:rtp300_firmware:*:*:*:*:*:*:*:*
Range: <=3.1.24
Cisco Systems, Inc./Rv120w Firmware
cpe:2.3:o:cisco:rv120w_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.5.9
Cisco Systems, Inc./Rv180 Firmware
cpe:2.3:o:cisco:rv180_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.5.4
Cisco Systems, Inc./Rv180w VPN Router Firmware
cpe:2.3:o:cisco:rv180w_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.5.4
Cisco Systems, Inc./Rv220w Firmware
cpe:2.3:o:cisco:rv220w_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.4.17
Cisco Systems, Inc./Rv315w Firmware
cpe:2.3:o:cisco:rv315w_firmware:*:*:*:*:*:*:*:*
Range: <=1.01.03
Cisco Systems, Inc./Rv320 Firmware
cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.1.10
Cisco Systems, Inc./Rv325 Firmware
cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*
Range: <=1.3.1.10
Cisco Systems, Inc./Rvs4000 Firmware
cpe:2.3:o:cisco:rvs4000_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.3.4
Cisco Systems, Inc./Spa400 Firmware
cpe:2.3:o:cisco:spa400_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.2.2
Cisco Systems, Inc./Srp520 Firmware
cpe:2.3:o:cisco:srp520_firmware:*:*:*:*:*:*:*:*
Range: <=1.01.29
Cisco Systems, Inc./Srp520 U Firmware
cpe:2.3:o:cisco:srp520-u_firmware:*:*:*:*:*:*:*:*
Range: <=1.2.6
Cisco Systems, Inc./Srw224p Firmware
cpe:2.3:o:cisco:srw224p_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.2.4
Cisco Systems, Inc./Wap2000 Firmware
cpe:2.3:o:cisco:wap2000_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.8.0
Cisco Systems, Inc./Wap200 Firmware
cpe:2.3:o:cisco:wap200_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.6.0
Cisco Systems, Inc./Wap4400n Firmware
cpe:2.3:o:cisco:wap4400n_firmware:*:*:*:*:*:*:*:*
Range: <=-
Cisco Systems, Inc./Wap4410n
cpe:2.3:o:cisco:wap4410n_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.7.8
Cisco Systems, Inc./Wet200 Firmware
cpe:2.3:o:cisco:wet200_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.8.0
Cisco Systems, Inc./Wrp500 Firmware
cpe:2.3:o:cisco:wrp500_firmware:*:*:*:*:*:*:*:*
Range: <=1.0.1.002
Cisco Systems, Inc./Wrv200 Firmware
cpe:2.3:o:cisco:wrv200_firmware:1.0.39:*:*:*:*:*:*:*
Cisco Systems, Inc./Wrv210 Firmware
cpe:2.3:o:cisco:wrv210_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.1.5
Cisco Systems, Inc./Wrvs4400n Firmware
cpe:2.3:o:cisco:wrvs4400n_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.2.2
Cisco Systems, Inc./Wvc2300 Firmware
cpe:2.3:o:cisco:wvc2300_firmware:*:*:*:*:*:*:*:*
Range: <=1.1.2.6
Cisco Systems, Inc./embedded devicesllm-create

Patches

Vulnerability mechanics

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151125-cinvdIssue TrackingPatchVendor Advisory
www.kb.cert.org/vuls/id/566724nvdThird Party AdvisoryUS Government Resource
www.securityfocus.com/bid/78047nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034255nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034256nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034257nvdThird Party AdvisoryVDB Entry
www.securitytracker.com/id/1034258nvdThird Party AdvisoryVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000