CVE:CVE-2015-6418
CNNVD:CNNVD-201512-401
Cisco Small Business RV Series Routers和Cisco SA500 Series Security Appliances都是美国思科（Cisco）公司的产品。前者是RV系列路由器产品；后者是SA500系列的安全网关设备。
Cisco Small Business RV Series Routers 4.x版本和SA500 Series Security Appliances 2.2.07版本的随机数生成器中存在安全漏洞，该漏洞源于程序使用未知来源的熵。远程攻击者可借助对key-exchange握手数据的计算利用该漏洞确定TLS密钥对。
solution:Upgrade cisco sa520 to a higher version than 2.2.07,and avoid the version 2.2.07; Upgrade cisco sa520w to a higher version than 2.2.07,and avoid the version 2.2.07; Upgrade cisco sa540 to a higher version than 2.2.07,and avoid the version 2.2.07; Upgrade cisco rv016_multi-wan_vpn_firmware to a higher version than 4.0.0.7,4.0.2.8,4.0.5.0,and avoid the version 4.0.0.7,4.0.2.8,4.0.5.0; Upgrade cisco rv042_dual_wan_vpn_router_firmware to a higher version than 4.0.2.8,and avoid the version 4.0.2.8; Upgrade cisco rv042g_dual_gigabit_wan_vpn_firmware to a higher version than 4.0.0.7,4.2.2.7,4.2.2.8,and avoid the version 4.0.0.7,4.2.2.7,4.2.2.8; Upgrade cisco rv082_dual_wan_vpn_router_firmware to a higher version than 4.0.0.7,4.0.2.8,and avoid the version 4.0.0.7,4.0.2.8