CVE-2015-6316
Status: ModifiedMedium (6.5)—
The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.
CVSS
- Version: 2.0
- Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
- Base score: 6.5
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 2.40%
- Percentile among all scored CVEs: 84
- Score date: 10/6/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- CWE-255
References
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred
- http://www.securityfocus.com/bid/77432
- http://www.securitytracker.com/id/1034065
- http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred
- http://www.securityfocus.com/bid/77432
- http://www.securitytracker.com/id/1034065
Raw JSON (NVD)
Show
{
"id": "CVE-2015-6316",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P",
"authentication": "SINGLE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2015-11-06T11:59:04.777",
"references": [
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/77432",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id/1034065",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "psirt@cisco.com"
},
{
"url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20151104-mse-cred",
"tags": [
"Mitigation",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/77432",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id/1034065",
"tags": [
"Third Party Advisory",
"VDB Entry"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-255"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501."
},
{
"lang": "es",
"value": "La configuración por defecto de sshd_config en Cisco Mobility Services Engine (MSE) hasta la versión 8.0.120.7 permite inicios de sesión mediante la cuenta de oracle, lo que hace que sea más fácil para atacantes remotos obtener acceso mediante la introducción de la contraseña codificada de esta cuenta en una sesión SSH, también conocido como Bug ID CSCuv40501."
}
],
"lastModified": "2026-06-17T00:30:41.533",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:5.1_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A26E1426-1345-49ED-95AB-DA0F2FF36C9D"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:5.2_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F9403633-6299-4FBD-A945-17339034F2DF"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:6.0_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "189A0B7E-1042-4C08-BF2F-B80AE2227E0C"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.0_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE771FF-9D5A-4EE9-A7A5-DADCE0D3FA5B"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.100.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ADA25694-139F-40C4-AE22-A4AF696E4472"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.110.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24240518-287C-4660-85C4-739659348E71"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4.121.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E7B3E19E-38EB-488B-9C86-CFF71E1DB705"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.4_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7733AF02-FFE6-4AFF-9F83-5A51EA247467"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.5.102.101:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "137CEA79-692B-4607-A69E-D8284DD320CB"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.100.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FB805389-DA84-48B9-9EB3-A0E3FC420A83"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.120.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A6698F9-7333-49C3-B7B6-3D938C1B2368"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:7.6.132.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA6F1EB9-D354-436C-A93D-18A69495E6AE"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:8.0\\(110.0\\):*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E59BCB1F-A4A7-443C-BB49-4B189820B326"
},
{
"criteria": "cpe:2.3:a:cisco:mobility_services_engine:8.0_base:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B656F50D-6EF5-44C8-A67F-BB5631908400"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "psirt@cisco.com"
}