CVE-2021-1167

🗓️ 13 Jan 2021 21:36:27Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 154 Views🌐 WEB

CVE-2021-1167: Multiple vulnerabilities in Cisco Small Business Router

Reporter	Title	Published	Views	Family All 18
zdt	Cisco RV110W 1.2.1.7 - (vpn_account) Denial of Service Exploit	14 Jan 202100:00	–	zdt
attackerkb	CVE-2021-1167	13 Jan 202116:00	–	attackerkb
BDU FSTEC	The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.	19 Jan 202100:00	–	bdu_fstec
Circl	CVE-2021-1167	31 May 202104:10	–	circl
Cisco	Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities	13 Jan 202116:00	–	cisco
CNNVD	多款Cisco产品缓冲区错误漏洞	13 Jan 202100:00	–	cnnvd
CNVD	Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41220)	14 Jan 202100:00	–	cnvd
Check Point Advisories	Cisco Small Business Routers Denial Of Service (CVE-2021-1167)	22 Feb 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-1167 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities	13 Jan 202121:36	–	cvelist
Exploit DB	Cisco RV110W 1.2.1.7 - 'vpn_account' Denial of Service (PoC)	14 Jan 202100:00	–	exploitdb

NVD

Node

AND

cisco rv110w_firmwareMatch1.2.1.7

cisco rv110w_firmwareMatch1.2.2.8

cisco rv110w_firmwareMatch1.3.1.7

cisco rv110wMatch-

Node

AND

cisco rv130_vpn_router_firmwareMatch1.2.2.8

cisco rv130_vpn_router_firmwareMatch1.3.1.7

cisco rv130_vpn_routerMatch-

Node

AND

cisco rv130w_firmwareMatch1.2.2.8

cisco rv130w_firmwareMatch1.3.1.7

cisco rv130wMatch-

Node

AND

cisco rv215w_wireless-n_vpn_router_firmwareMatch1.2.2.8

cisco rv215w_wireless-n_vpn_router_firmwareMatch1.3.1.7

cisco rv215w_wireless-n_vpn_routerMatch-

Node

cisco application_extension_platformMatch1.0.3.55

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U
packetstormsecurity	www.packetstormsecurity.com/files/160953/Cisco-RV110W-1.2.1.7-Denial-Of-Service.html

Parameter	Position	Path	Description	CWE
vpn_account	request body	/apply.cgi;session_id=	Denial of service via stack overflow in vpn_account parameter of apply.cgi on Cisco RV110W/RV130/RV130W/RV215W web management interfaces.	CWE-121, CWE-787

17 Jun 2026 03:31Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

CVSS 29

EPSS0.0587

SSVC