← Vulnerability feed

Vulnerability record · CVE-2015-6418 · published 13 December 2015

CVE-2015-6418: Cisco sa520 information exposure vulnerability

Cisco · Sa520

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

4.3 CVSS 2.0 Medium EPSS 1.8% · top 21.9% CWE-200 · Information exposure
4.3CVSS 2.0 base score
1.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
7Affected product versions listed by NVD
8References
17 Jun 2026Last modified by NVD

Description

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

AV:N/AC:M/Au:N/C:P/I:N/A:N

Affected products

7 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-dwvr Vendor Advisory
http://www.securityfocus.com/bid/78876
http://www.securitytracker.com/id/1034408
http://www.securitytracker.com/id/1034409
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151210-dwvr Vendor Advisory
http://www.securityfocus.com/bid/78876
http://www.securitytracker.com/id/1034408
http://www.securitytracker.com/id/1034409

Track CVE-2015-6418 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2019-15271Cisco RV Series Routers web interface command injection via untrusted deserializationThe web-based management interface of several Cisco Small Business RV Series Routers fails to validate HTTP payload input, allowing deserialization o…KEVEPSS 5.5%analysed9.0CVE-2011-2547Cisco sa500 software permissions and access controls vulnerabilityThe web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execut…EPSS 2.2%7.2CVE-2021-1340Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.8%7.2CVE-2021-1341Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.8%7.2CVE-2021-1342Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.8%7.2CVE-2021-1343Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.2%7.2CVE-2021-1344Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.2%7.2CVE-2021-1345Cisco rv016 multi-wan vpn router firmware stack-based buffer overflow vulnerabilityMultiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could al…EPSS 2.2%

Source: NIST National Vulnerability Database (record CVE-2015-6418), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.