CVE-2014-2179
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:rv180_firmware | cisco rv180 firmware | le | 1.0.3.10 |
| cisco:rv180 | cisco rv180 | eq | - |
| cisco:rv180w | cisco rv180w | eq | - |
References
packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html
seclists.org/fulldisclosure/2014/Nov/6
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv
www.securityfocus.com/archive/1/533917/100/0/threaded
www.securitytracker.com/id/1031171
exchange.xforce.ibmcloud.com/vulnerabilities/98499
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%