CVE-2021-1167

🗓️ 13 Jan 2021 21:36:27Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 119 Views🌐 WEB

CVE-2021-1167: Multiple vulnerabilities in Cisco Small Business Router

Reporter	Title	Published	Views	Family All 15
0day.today	Cisco RV110W 1.2.1.7 - (vpn_account) Denial of Service Exploit	14 Jan 202100:00	–	zdt
BDU FSTEC	The vulnerability in the web interface for managing microprogrammed wireless router software of Cisco RV110W, Cisco RV130, Cisco RV130W, and Cisco RV215W allows a hacker to execute arbitrary code or cause a service failure.	19 Jan 202100:00	–	bdu_fstec
Circl	CVE-2021-1167	31 May 202104:10	–	circl
Cisco	Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities	13 Jan 202116:00	–	cisco
CNNVD	多款Cisco产品缓冲区错误漏洞	13 Jan 202100:00	–	cnnvd
CNVD	Cisco RV110W/RV130/RV130W/RV215W Remote Command Execution and Denial of Service Vulnerability (CNVD-2021-41220)	14 Jan 202100:00	–	cnvd
Check Point Advisories	Cisco Small Business Routers Denial Of Service (CVE-2021-1167)	22 Feb 202100:00	–	checkpoint_advisories
Cvelist	CVE-2021-1167 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities	13 Jan 202121:36	–	cvelist
Exploit DB	Cisco RV110W 1.2.1.7 - 'vpn_account' Denial of Service (PoC)	14 Jan 202100:00	–	exploitdb
EUVD	EUVD-2021-6634	3 Oct 202520:07	–	euvd

NVD

Node

cisco rv110w_firmwareMatch1.2.1.7

cisco rv110w_firmwareMatch1.2.2.8

cisco rv110w_firmwareMatch1.3.1.7

AND

cisco rv110wMatch-

Node

cisco rv130_vpn_router_firmwareMatch1.2.2.8

cisco rv130_vpn_router_firmwareMatch1.3.1.7

AND

cisco rv130_vpn_routerMatch-

Node

cisco rv130w_firmwareMatch1.2.2.8

cisco rv130w_firmwareMatch1.3.1.7

AND

cisco rv130wMatch-

Node

cisco rv215w_wireless-n_vpn_router_firmwareMatch1.2.2.8

cisco rv215w_wireless-n_vpn_router_firmwareMatch1.3.1.7

AND

cisco rv215w_wireless-n_vpn_routerMatch-

Node

cisco application_extension_platformMatch1.0.3.55

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
packetstormsecurity	www.packetstormsecurity.com/files/160953/Cisco-RV110W-1.2.1.7-Denial-Of-Service.html
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U

Parameter	Position	Path	Description	CWE
user	request body	login.cgi	Authenticated user login endpoint vulnerable to improper input handling leading to potential code execution or remote impact during login flow.	CWE-787, CWE-121
pwd	request body	login.cgi	Authenticated user login endpoint vulnerable to improper input handling leading to potential code execution or remote impact during login flow.	CWE-787, CWE-121
enc	request body	login.cgi	Authenticated user login endpoint vulnerable to improper input handling leading to potential code execution or remote impact during login flow.	CWE-787, CWE-121
vpn_account	request body	apply.cgi;session_id=	Apply/config endpoint vulnerable to overflow via vpn_account parameter, enabling denial of service under authenticated session.	CWE-787, CWE-121

17 Jun 2026 03:31Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

CVSS 29

EPSS0.05628

SSVC