NVD

Id
27222  
Name
CVE-2015-6280  
Description
The SSHv2 functionality in Cisco IOS 15.2, 15.3, 15.4, and 15.5 and IOS XE 3.6E before 3.6.3E, 3.7E before 3.7.1E, 3.10S before 3.10.6S, 3.11S before 3.11.4S, 3.12S before 3.12.3S, 3.13S before 3.13.3S, and 3.14S before 3.14.1S does not properly implement RSA authentication, which allows remote attackers to obtain login access by leveraging knowledge of a username and the associated public key, aka Bug ID CSCus73013.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-27  
Modified Date
2017-01-04  
Seq
2015-6280  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143649 27222 CVE-2015-6280 20150923 Cisco IOS and IOS XE Software SSH Version 2 RSA-Based User Authentication Bypass Vulnerability  View
143650 27222 CVE-2015-6280 http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150923-sshpk/cvrf/cisco-sa-20150923-sshpk_cvrf.xml  View
143651 27222 CVE-2015-6280 1033646  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9632 JVNDB-2015-004952 Cisco IOS および IOS XE の SSHv2 機能におけるログインアクセス権を取得される脆弱性 Cisco IOS および IOS XE の SSHv2 機能は、RSA 認証を適切に実装していないため、ログインアクセス権を取得される脆弱性が存在します。 CVE-2015-6280 83505 CVE-2015-6280 27222 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004952.html 2015-09-23 2015-09-30 View