NVD

Id
27349  
Name
CVE-2015-6414  
Description
Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers" installations, which makes it easier for local users to defeat cryptographic protection mechanisms by leveraging knowledge of a key from another installation, aka Bug ID CSCuw64516.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-12-12  
Modified Date
2016-12-07  
Seq
2015-6414  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
143912 27349 CVE-2015-6414 20151210 Cisco TelePresence Video Communication Server Information Disclosure Vulnerability  View
143913 27349 CVE-2015-6414 79065  View
143914 27349 CVE-2015-6414 1034429  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
11068 JVNDB-2015-006388 Cisco TelePresence Video Communication Server における暗号保護メカニズムを破られる脆弱性 Cisco TelePresence Video Communication Server (VCS) は、異なるカスタマのインストールで同じ暗号鍵を使用するため、暗号保護メカニズムを破られる脆弱性が存在します。 CVE-2015-6414 83639 CVE-2015-6414 27349 2.1 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-006388.html 2015-12-10 2015-12-16 View