CVE-2015-6418: Cisco RV016 Multi-WAN VPN Firmware

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS key pair via unspecified computations upon handshake key-exchange data, aka Bug ID CSCus15224.

Affected products

• Cisco RV016 Multi-WAN VPN Firmware: version 4.0.0.7 only; version 4.0.2.8 only; version 4.0.5.0 only
• Cisco RV042 Dual WAN VPN Router Firmware: version 4.0.2.8 only
• Cisco RV042G Dual Gigabit WAN VPN Firmware: version 4.0.0.7 only; version 4.2.2.7 only; version 4.2.2.8 only
• Cisco RV082 Dual WAN VPN Router Firmware: version 4.0.0.7 only; version 4.0.2.8 only
• Cisco SA520: version 2.2.07 only
• Cisco SA520W: version 2.2.07 only
• Cisco SA540: version 2.2.07 only

Published 2015-12-13. Last modified 2026-06-17.