CVE-2015-6280
Severity Score
9.3
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013.
Vulnerabilidad en la funcionalidad SSHv2 en Cisco IOS 15.2, 15.3, 15.4 y 15.5 y IOS XE 3.6E en versiones anteriores a 3.6.3E, 3.7E en versiones anteriores a 3.7.1E, 3.10S en versiones anteriores a 3.10.6S, 3.11S en versiones anteriores a 3.11.4S, 3.12S en versiones anteriores a 3.12.3S, 3.13S en versiones anteriores a 3.13.3S y 3.14S en versiones anteriores a 3.14.1S, no implementa adecuadamente la autenticación RSA, lo que permite a atacantes remotos obtener el acceso de inicio de sesión mediante el aprovechamiento de los conocimientos de un nombre de usuario y la clave pública asociada, también conocido como Bug ID CSCus73013.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-08-17 CVE Reserved
- 2015-09-28 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-287: Improper Authentication
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id/1033646 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(1\)sy Search vendor "Cisco" for product "Ios" and version "15.2\(1\)sy" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(1\)sy0a Search vendor "Cisco" for product "Ios" and version "15.2\(1\)sy0a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2\)e Search vendor "Cisco" for product "Ios" and version "15.2\(2\)e" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2\)e1 Search vendor "Cisco" for product "Ios" and version "15.2\(2\)e1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2\)e2 Search vendor "Cisco" for product "Ios" and version "15.2\(2\)e2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2\)ea1 Search vendor "Cisco" for product "Ios" and version "15.2\(2\)ea1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2a\)e1 Search vendor "Cisco" for product "Ios" and version "15.2\(2a\)e1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(2a\)e2 Search vendor "Cisco" for product "Ios" and version "15.2\(2a\)e2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(3\)e Search vendor "Cisco" for product "Ios" and version "15.2\(3\)e" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(3\)ea Search vendor "Cisco" for product "Ios" and version "15.2\(3\)ea" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.2\(3a\)e Search vendor "Cisco" for product "Ios" and version "15.2\(3a\)e" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)m1 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)m1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)m2 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)m2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)m3 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)m3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)m4 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)m4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)m5 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)m5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s1 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s1a Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s1a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s2 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s3 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s4 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.3\(3\)s5 Search vendor "Cisco" for product "Ios" and version "15.3\(3\)s5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)cg Search vendor "Cisco" for product "Ios" and version "15.4\(1\)cg" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)cg1 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)cg1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s1 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s2 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)s3 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)s3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)t Search vendor "Cisco" for product "Ios" and version "15.4\(1\)t" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)t1 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)t1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)t2 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)t2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(1\)t3 Search vendor "Cisco" for product "Ios" and version "15.4\(1\)t3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)cg Search vendor "Cisco" for product "Ios" and version "15.4\(2\)cg" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s1 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)s2 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)t Search vendor "Cisco" for product "Ios" and version "15.4\(2\)t" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)t1 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)t1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(2\)t2 Search vendor "Cisco" for product "Ios" and version "15.4\(2\)t2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)m Search vendor "Cisco" for product "Ios" and version "15.4\(3\)m" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)m1 Search vendor "Cisco" for product "Ios" and version "15.4\(3\)m1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)m2 Search vendor "Cisco" for product "Ios" and version "15.4\(3\)m2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)s Search vendor "Cisco" for product "Ios" and version "15.4\(3\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)s1 Search vendor "Cisco" for product "Ios" and version "15.4\(3\)s1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.4\(3\)s2 Search vendor "Cisco" for product "Ios" and version "15.4\(3\)s2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.5\(1\)s Search vendor "Cisco" for product "Ios" and version "15.5\(1\)s" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Search vendor "Cisco" for product "Ios" | 15.5\(1\)t Search vendor "Cisco" for product "Ios" and version "15.5\(1\)t" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.0 Search vendor "Cisco" for product "Ios Xe" and version "3.6e.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.0a Search vendor "Cisco" for product "Ios Xe" and version "3.6e.0a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.0b Search vendor "Cisco" for product "Ios Xe" and version "3.6e.0b" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.1 Search vendor "Cisco" for product "Ios Xe" and version "3.6e.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.2 Search vendor "Cisco" for product "Ios Xe" and version "3.6e.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.6e.2a Search vendor "Cisco" for product "Ios Xe" and version "3.6e.2a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.7e.0 Search vendor "Cisco" for product "Ios Xe" and version "3.7e.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.0a Search vendor "Cisco" for product "Ios Xe" and version "3.10s.0a" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.01 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.01" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.3 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.4 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.4" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.10s.5 Search vendor "Cisco" for product "Ios Xe" and version "3.10s.5" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.11s.3 Search vendor "Cisco" for product "Ios Xe" and version "3.11s.3" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.12s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.12s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.13s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.13s.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.13s.1 Search vendor "Cisco" for product "Ios Xe" and version "3.13s.1" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.13s.2 Search vendor "Cisco" for product "Ios Xe" and version "3.13s.2" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ios Xe Search vendor "Cisco" for product "Ios Xe" | 3.14s.0 Search vendor "Cisco" for product "Ios Xe" and version "3.14s.0" | - |
Affected
| ||||||