20160803 Cisco RV110W, RV130W, and RV215W Routers Command Shell Injection VulnerabilityVendor advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160803-rv110_130w1 CVE-2015-6396
HIGH
Cisco RV110W - Password Disclosure / Command Execution
Record summary
CVE-2015-6396 has a selected CVSS score of 7.8 (high); EIP currently links 1 catalogued exploit.
Description
The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134, CSCux58161, and CSCux73567.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBCisco RV110W - Password Disclosure / Command ExecutionExploitDB exploitby RyShNot analyzed1 file
References
592269vdb entry
http://www.securityfocus.com/bid/92269 1036528vdb entry
http://www.securitytracker.com/id/1036528 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2015-6396 45986exploit
https://www.exploit-db.com/exploits/45986