← Vulnerability feed

Vulnerability record · CVE-2015-6298 · published 6 November 2015

CVE-2015-6298: Cisco web security appliance os command injection vulnerability

Cisco · Web Security Appliance

The admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root privileges via crafted certificate-generation arguments, aka Bug ID CSCus83445.

9.0 CVSS 2.0 High EPSS 1.7% · top 24.3% CWE-78 · OS command injection
9.0CVSS 2.0 base score
1.7%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
4References
17 Jun 2026Last modified by NVD

Description

The admin web interface in Cisco AsyncOS 8.x before 8.0.8-113, 8.1.x and 8.5.x before 8.5.3-051, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.8.x before 8.8.0-085 on Web Security Appliance (WSA) devices allows remote authenticated users to obtain root privileges via crafted certificate-generation arguments, aka Bug ID CSCus83445.

AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-wsa Vendor Advisory
http://www.securitytracker.com/id/1034059
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-wsa Vendor Advisory
http://www.securitytracker.com/id/1034059

Track CVE-2015-6298 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2023-20032Cisco secure endpoint classic buffer overflow vulnerabilityOn Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file parser of ClamA…EPSS 29%8.8CVE-2021-1359Cisco web security appliance vulnerabilityA vulnerability in the configuration management of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker…EPSS 1.9%8.8CVE-2019-15956Cisco asyncos improper access control vulnerabilityA vulnerability in the web management interface of Cisco AsyncOS Software for Cisco Web Security Appliance (WSA) could allow an authenticated, remote…EPSS 0.98%8.6CVE-2019-1886Cisco asyncos improper input validation vulnerabilityA vulnerability in the HTTPS decryption feature of Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cause a deni…EPSS 1.3%8.6CVE-2018-0410Cisco web security appliance uncontrolled resource consumption vulnerabilityA vulnerability in the web proxy functionality of Cisco AsyncOS Software for Cisco Web Security Appliances could allow an unauthenticated, remote att…EPSS 4.1%7.8CVE-2019-1816Cisco web security appliance improper input validation vulnerabilityA vulnerability in the log subscription subsystem of the Cisco Web Security Appliance (WSA) could allow an authenticated, local attacker to perform c…EPSS 0.64%7.8CVE-2015-6292Cisco web security appliance vulnerabilityThe proxy-cache implementation in Cisco AsyncOS 8.0.x before 8.0.7-151, 8.1.x and 8.5.x before 8.5.2-004, 8.6.x and 8.7.x before 8.7.0-171-LD, and 8.…EPSS 1.9%7.8CVE-2015-6321Cisco web security appliance vulnerabilityCisco AsyncOS before 8.5.7-042, 9.x before 9.1.0-032, 9.1.x before 9.1.1-023, and 9.5.x and 9.6.x before 9.6.0-042 on Email Security Appliance (ESA) …EPSS 2.8%

Source: NIST National Vulnerability Database (record CVE-2015-6298), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.