CVE-2015-6418

MEDIUM
CVSS v3
4.3CVSS v2
0.39% EPSS (exploit probability)
CWE-200CWE

Description

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

Affected routers (1)

VendorModelMatched viaAffected versionsFixed inPatch Status
Cisco Cisco RV042 Unpatched

External references