CVE-2015-6316
Cisco Mobility Services Engine - Default SSH Credential Exposure via Oracle Account
Title source: llmDescription
The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.
References (3)
Core 3
Core References
Mitigation, Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/77432
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1034065
Scores
EPSS
0.0240
EPSS Percentile
82.3%
Details
CWE
CWE-255
Status
published
Products (14)
cisco/mobility_services_engine
5.1_base
cisco/mobility_services_engine
5.2_base
cisco/mobility_services_engine
6.0_base
cisco/mobility_services_engine
7.0_base
cisco/mobility_services_engine
7.4.100.0
cisco/mobility_services_engine
7.4.110.0
cisco/mobility_services_engine
7.4.121.0
cisco/mobility_services_engine
7.4_base
cisco/mobility_services_engine
7.5.102.101
cisco/mobility_services_engine
7.6.100.0
... and 4 more
Published
Nov 06, 2015
Tracked Since
Feb 18, 2026