CVE-2015-6336

HIGH

Cisco Aironet 1800 Series Access Points Default Credential Exposure

Title source: llm

Description

Cisco Aironet 1800 devices with software 7.2, 7.3, 7.4, 8.1(112.3), 8.1(112.4), and 8.1(15.14) have a default account, which makes it easier for remote attackers to obtain access via unspecified vectors, aka Bug ID CSCuw58062.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160113-air

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1034667

Scores

CVSS v3 7.3

EPSS 0.0139

EPSS Percentile 69.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Details

CWE

CWE-255

Status published

Products (6)

cisco/aironet_access_point_software 7.2_base

cisco/aironet_access_point_software 7.3_base

cisco/aironet_access_point_software 7.4_base

cisco/aironet_access_point_software 8.1\(15.14\)

cisco/aironet_access_point_software 8.1\(112.3\)

cisco/aironet_access_point_software 8.1\(112.4\)

Published Jan 15, 2016

Tracked Since Feb 18, 2026