CVE-2015-6397: Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, whic...

Security readout for executives and security teams

This issue affects Cisco RV110W, RV130W, and RV215W routers. A default account has incorrect role permissions, allowing an authenticated remote user with that login session to gain root access. For businesses still using these small-business routers, the main risk is full device takeover after authentication. Exposure is likely limited to organizations still operating the named Cisco RV110W, RV130W, or RV215W routers, especially where administrative access is reachable by untrusted users. The provided affected metadata is incomplete, so model and firmware confirmation against Cisco guidance is required. Treat this as high priority for any remaining affected Cisco small-business routers. Root access to a router can undermine network segmentation, traffic integrity, and remote access controls. Priority is lower only if inventory confirms none of the named devices are deployed. Mitigation focus: Identify any Cisco RV110W, RV130W, or RV215W devices in service.; Review Cisco advisory cisco-sa-20160803-rv110_130w2 for supported fixes or mitigations.; Apply Cisco-provided firmware updates or mitigations where available..

Prepared

Jun 13, 2026, 14:00 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.