CVE-2015-4217

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management Virtual Appliance (SMAv) devices before 2015-06-25 uses the same default SSH host keys across different customers' installations, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging knowledge of a private key from another installation, aka Bug IDs CSCus29681, CSCuu95676, and CSCuu96601.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-200 CWE-310

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironportVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=39461Vendor Advisory
http://www.securityfocus.com/bid/75418Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032725Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032726Third Party Advisory, VDB Entry
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20150625-ironportVendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=39461Vendor Advisory
http://www.securityfocus.com/bid/75418Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032725Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1032726Third Party Advisory, VDB Entry

Timeline

Published: Jun 26, 2015
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2015

CVE-2015-42185.0The web-based user interface in Cisco Jabber through 9.6(3) and 9.7 through 9.7(5) on Windows allows remote attackers to obtain sensitive in CVE-2015-42194.0Cisco Secure Access Control System before 5.4(0.46.2) and 5.5 before 5.5(0.46) and Cisco Identity Services Engine 1.0(4.573) do not properly CVE-2015-42204.3Cross-site scripting (XSS) vulnerability in Cisco Unified Presence Server 9.1(1) allows remote attackers to inject arbitrary web script or H CVE-2015-42214.0Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows r CVE-2015-42226.5SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to exec CVE-2015-42235.0Cisco IOS XR 5.1.3 allows remote attackers to cause a denial of service (process reload) via crafted MPLS Label Distribution Protocol (LDP) CVE-2015-42247.2Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged cont CVE-2015-42254.0Cisco Application Policy Infrastructure Controller (APIC) 1.0(1.110a) and 1.0(1e) on Nexus 9000 devices does not properly implement RBAC hea CVE-2015-42267.1The packet-storing feature on Cisco 9900 phones with firmware 9.3(2) does not properly support the RTP protocol, which allows remote attacke CVE-2015-42277.8Memory leak in Cisco Headend System Release allows remote attackers to cause a denial of service (memory consumption) via unspecified vector CVE-2015-42285.4Cisco Digital Content Manager (DCM) 15.0.0 might allow remote ad servers to cause a denial of service (reboot) via malformed ad messages, ak CVE-2015-42295.0The web framework in Cisco Unified Communications Domain Manager 8.1(4)ER1 allows remote attackers to obtain sensitive information by visiti