Information disclosure in Cisco Rv016_multi-wan_vpn_firmware
CVE-2015-6418
The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations u…
Vulnerability class: Information Disclosure
EPSS: 0.018 (76.6th percentile) — read the EPSS interpretation.
Affected products
- Cisco Rv016_multi-wan_vpn_firmware — versions 4.0.0.7, 4.0.2.8, 4.0.5.0
- Cisco Rv042_dual_wan_vpn_router_firmware — versions 4.0.2.8
- Cisco Rv042g_dual_gigabit_wan_vpn_firmware — versions 4.0.0.7, 4.2.2.7, 4.2.2.8
- Cisco Rv082_dual_wan_vpn_router_firmware — versions 4.0.0.7, 4.0.2.8
- Cisco Sa520 — versions 2.2.07
- Cisco Sa520w — versions 2.2.07
- Cisco Sa540 — versions 2.2.07
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_BID)