CVE-2015-6316

Published: Nov 6, 2015Modified: May 6, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

The default configuration of sshd_config in Cisco Mobility Services Engine (MSE) through 8.0.120.7 allows logins by the oracle account, which makes it easier for remote attackers to obtain access by entering this account's hardcoded password in an SSH session, aka Bug ID CSCuv40501.

Affected (14)

Products: Cisco: Mobility Services Engine

Cisco

1 product

Mobility Services Engine

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Cisco Mobility Services Engine	Version 5.1_base
Cisco Mobility Services Engine	Version 5.2_base
Cisco Mobility Services Engine	Version 6.0_base
Cisco Mobility Services Engine	Version 7.0_base
Cisco Mobility Services Engine	Version 7.4.100.0
Cisco Mobility Services Engine	Version 7.4.110.0
Cisco Mobility Services Engine	Version 7.4.121.0
Cisco Mobility Services Engine	Version 7.4_base
Cisco Mobility Services Engine	Version 7.5.102.101
Cisco Mobility Services Engine	Version 7.6.100.0
Cisco Mobility Services Engine	Version 7.6.120.0
Cisco Mobility Services Engine	Version 7.6.132.0
Cisco Mobility Services Engine	Version 8.0(110.0)
Cisco Mobility Services Engine	Version 8.0_base