Cisco RVS4000 Firmware vulnerabilities

2 CVEs affecting Cisco RVS4000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-6358, published 2017-10-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0659, published 2014-01-12. High severity, CVSS 10.0. EPSS: 73.8% chance of exploitation in the next 30 days. The Cisco WAP4410N access point with firmware through 2.0.6.1, WRVS4400N router with firmware 1.x through 1.1.13 and 2.x through 2.0.2.1, and RVS4000 router with firmware through 2.0.3.2 allow remote…
CVE-2015-6358, published 2017-10-12. Medium severity, CVSS 5.9. EPSS: 1.3% chance of exploitation in the next 30 days. Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct…