« Volver al listado

CVE-2015-6316

Estado: ModificadaMedia (6.5)—

The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Mobility Services Engine

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-6316",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-11-06T11:59:04.777",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/77432",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1034065",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred",
      "tags": [
        "Mitigation",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/77432",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1034065",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-255"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501."
    },
    {
      "lang": "es",
      "value": "La configuración por defecto de sshd_config en Cisco Mobility Services Engine (MSE) hasta la versión 8.0.120.7 permite inicios de sesión mediante la cuenta de oracle, lo que hace que sea más fácil para atacantes remotos obtener acceso mediante la introducción de la contraseña codificada de esta cuenta en una sesión SSH, también conocido como Bug ID CSCuv40501."
    }
  ],
  "lastModified": "2026-06-17T00:30:41.533",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A26E1426-1345-49ED-95AB-DA0F2FF36C9D"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:5.2_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F9403633-6299-4FBD-A945-17339034F2DF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:6.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "189A0B7E-1042-4C08-BF2F-B80AE2227E0C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EEE771FF-9D5A-4EE9-A7A5-DADCE0D3FA5B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.100.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADA25694-139F-40C4-AE22-A4AF696E4472"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.110.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24240518-287C-4660-85C4-739659348E71"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.121.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7B3E19E-38EB-488B-9C86-CFF71E1DB705"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7733AF02-FFE6-4AFF-9F83-5A51EA247467"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.5.102.101:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "137CEA79-692B-4607-A69E-D8284DD320CB"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.100.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB805389-DA84-48B9-9EB3-A0E3FC420A83"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.120.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0A6698F9-7333-49C3-B7B6-3D938C1B2368"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.132.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EA6F1EB9-D354-436C-A93D-18A69495E6AE"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:8.0\\(110.0\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E59BCB1F-A4A7-443C-BB49-4B189820B326"
            },
            {
              "criteria": "cpe:2.3:a:cisco:mobility_services_engine:8.0_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B656F50D-6EF5-44C8-A67F-BB5631908400"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}