The vulnerability of the web interface of Microprogramming Software Routers Cisco Small Business RV320 and Cisco Small Business RV325 allows a hacker to execute arbitrary code with root privileges.

🗓️ 30 Jan 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Cisco RV320 and RV325 web interfaces allow root code execution via crafted HTTP POST.

Reporter	Title	Published	Views	Family All 39
0day.today	Cisco RV320 Command Injection Vulnerability	24 Jan 201900:00	–	zdt
0day.today	Cisco RV320 Command Injection Vulnerability	27 Mar 201900:00	–	zdt
0day.today	Cisco RV320 / RV325 Unauthenticated Remote Code Execution Exploit	30 Mar 201900:00	–	zdt
Tenable Nessus	Cisco RV320 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco RV325 < 1.4.2.22 Multiple Vulnerabilities	16 Apr 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Information Disclosure Vulnerability (cisco-sa-20190123-rv-info) (remote check)	25 Jan 201900:00	–	nessus
Tenable Nessus	Cisco Small Business RV320 and RV325 Routers Multiple Vulnerabilities (cisco-sa-20190123-rv-inject, cisco-sa-20190123-rv-info)	15 Apr 201900:00	–	nessus
GithubExploit	Exploit for Improper Input Validation in Cisco Rv320_Firmware	24 Jan 201910:12	–	githubexploit
ICS	Potential for China Cyber Response to Heightened U.S.–China Tensions	20 Oct 202012:00	–	ics
ICS	People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices	10 Jun 202212:00	–	ics

Vulners

Node

OR

cisco_systems cisco_small_business_rv320Range1.4.2.15–1.4.2.19

cisco_systems cisco_small_business_rv325Range1.4.2.15–1.4.2.19

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-rv-inject
exploit-db	www.exploit-db.com/exploits/46243
cisa	www.cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv
exploit-db	www.exploit-db.com/exploits/46655/
web	www.web.nvd.nist.gov/view/vuln/detail
exploit-db	www.exploit-db.com/exploits/46243/

28 Feb 2025 00:00Current

8High risk

Vulners AI Score8

CVSS 37.2

CVSS 29

EPSS0.95923

cisco small business web interface vulnerability root privileges arbitrary code execution post request input validation