CVE-2019-1663

🗓️ 28 Feb 2019 18:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 196 Views🌐 WEB

A vulnerability in the web-based interface of certain Cisco routers allows remote code execution

Reporter	Title	Published	Views	Family All 33
0day.today	Cisco RV130W Routers Management Interface Remote Command Execution Exploit	15 Apr 201900:00	–	zdt
0day.today	Cisco RV130W 1.0.3.44 - Remote Stack Overflow Exploit	4 Jun 201900:00	–	zdt
0day.today	Cisco RV110W / RV130(W) / RV215W Remote Command Execution Exploit	2 Sep 201900:00	–	zdt
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv110W_Firmware	29 Nov 202517:54	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Cisco Rv110W_Firmware	2 Sep 202519:23	–	githubexploit
Circl	CVE-2019-1663	28 Feb 201915:31	–	circl
Cisco	Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability	27 Feb 201916:00	–	cisco
Tenable Nessus	Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability (cisco-sa-20190227-rmi-cmd-ex)	27 Feb 201900:00	–	nessus
CNVD	Cisco RV110W, RV130W, and RV215W Remote Command Execution Vulnerabilities	28 Feb 201900:00	–	cnvd

NVD

Node

cisco rv110w_firmwareRange<1.2.2.1

AND

cisco rv110wMatch-

Node

cisco rv130w_firmwareRange<1.0.3.45

AND

cisco rv130wMatch-

Node

cisco rv215w_firmwareRange<1.3.1.1

AND

cisco rv215wMatch-

[
  {
    "product": "RV110W Wireless-N VPN Firewall",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "1.2.2.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RV130W Wireless-N Multifunction VPN Router",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "1.0.3.45",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "RV215W Wireless-N VPN Router",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "1.3.1.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-rmi-cmd-ex
rapid7	www.rapid7.com/db/modules/exploit/linux/http/cisco_rv130_rmi_rce
packetstormsecurity	www.packetstormsecurity.com/files/154310/Cisco-RV110W-RV130-W-RV215W-Remote-Command-Execution.html
securityfocus	www.securityfocus.com/bid/107185
exploit-db	www.exploit-db.com/exploits/46705/
packetstormsecurity	www.packetstormsecurity.com/files/153163/Cisco-RV130W-1.0.3.44-Remote-Stack-Overflow.html
packetstormsecurity	www.packetstormsecurity.com/files/152507/Cisco-RV130W-Routers-Management-Interface-Remote-Command-Execution.html

Parameter	Position	Path	Description	CWE
pwd	request body	/login.cgi	Unauthenticated remote command execution via crafted POST to /login.cgi exploiting improper validation in the web management interface.	CWE-119, CWE-787

21 Nov 2024 04:37Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

CVSS 210

CVSS 39.8

EPSS0.87247

SSVC