CVE-2015-6396

CVE Database · CVE-2015-6396

CVE-2015-6396

· N/AModified

CVSS v3.1

N/A

EPSS

1.94%

Published

Aug 7, 2016

Modified

May 6, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBCisco RV110W - Password Disclosure / Command Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.

Weaknesses (CWE)

CWE-78

Affected Products (6)

cisco · rv110w_wireless-n_vpn_firewall_firmwarevulnerable

cisco · rv110w_wireless-n_vpn_firewall

cisco · rv130w_wireless-n_multifunction_vpn_router_firmwarevulnerable

cisco · rv130w_wireless-n_multifunction_vpn_router

cisco · rv215w_wireless-n_vpn_router_firmwarevulnerable

cisco · rv215w_wireless-n_vpn_router

References (8)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1

MitigationVendor Advisory

http://www.securityfocus.com/bid/92269

http://www.securitytracker.com/id/1036528

https://www.exploit-db.com/exploits/45986/

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1

MitigationVendor Advisory

http://www.securityfocus.com/bid/92269

http://www.securitytracker.com/id/1036528

https://www.exploit-db.com/exploits/45986/

KEV Catalog EPSS Scores Vendors All CVEs