The vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130 VPN Routers, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to execute arbitrary operating system commands.

🗓️ 21 Jul 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 8 Views

Vulnerability in Cisco routers web interfaces enables remote arbitrary operating system command execution.

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	15 Jul 202016:00	–	cisco
Tenable Nessus	Cisco Small Business Routers Command Shell Injection (cisco-sa-cmd-shell-injection-9jOQn9Dy)	28 Aug 202000:00	–	nessus
CVE	CVE-2020-3332	16 Jul 202017:21	–	cve
Cvelist	CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	16 Jul 202017:21	–	cvelist
EUVD	EUVD-2020-24603	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3332	16 Jul 202018:15	–	nvd
OSV	CVE-2020-3332	16 Jul 202018:15	–	osv
Prion	Input validation	16 Jul 202018:15	–	prion
Vulnrichment	CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	16 Jul 202017:21	–	vulnrichment

Vulners

Node

OR

cisco_systems cisco_rv110wRange<1.2.2.8

cisco_systems cisco_rv130wRange<1.0.3.55

cisco_systems cisco_rv215wRange<1.3.1.7

cisco_systems cisco_rv130Range<1.0.3.55

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmd-shell-injection-9jOQn9Dy
nvd	www.nvd.nist.gov/vuln/detail/CVE-2020-3332
web	www.web.nvd.nist.gov/view/vuln/detail

21 Jul 2020 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 38.1

CVSS 28.5

EPSS0.0318

Cisco routers Web interface Remote command execution Arbitrary commands