Lucene search

CiscoCVE-2023-20250

HistorySep 06, 2023 - 5:15 p.m.

CVE-2023-20250

2023-09-0617:15:50

CWE-787

CWE-121

cisco

web.nvd.nist.gov

cve

cisco

small business

rv routers

arbitrary code execution

vulnerability

nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

48.0%

JSON

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device.

This vulnerability is due to improper validation of requests that are sent to the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary code with root privileges on an affected device. To exploit this vulnerability, the attacker must have valid Administrator credentials on the affected device.

Affected configurations

Nvd

Node

ciscorv110w_firmwareMatch1.0.0.2

ciscorv110w_firmwareMatch1.0.0.21

ciscorv110w_firmwareMatch1.0.0.30

ciscorv110w_firmwareMatch1.0.1.1

ciscorv110w_firmwareMatch1.0.1.3

ciscorv110w_firmwareMatch1.0.1.6

ciscorv110w_firmwareMatch1.0.1.99

ciscorv110w_firmwareMatch1.0.2.7

ciscorv110w_firmwareMatch1.0.2.99

ciscorv110w_firmwareMatch1.0.3.14

ciscorv110w_firmwareMatch1.0.3.16

ciscorv110w_firmwareMatch1.0.3.22

ciscorv110w_firmwareMatch1.0.3.28

ciscorv110w_firmwareMatch1.0.3.44

ciscorv110w_firmwareMatch1.0.3.45

ciscorv110w_firmwareMatch1.0.3.51

ciscorv110w_firmwareMatch1.0.3.52

ciscorv110w_firmwareMatch1.0.3.54

ciscorv110w_firmwareMatch1.0.3.55

ciscorv110w_firmwareMatch1.1.0.5

ciscorv110w_firmwareMatch1.1.0.6

ciscorv110w_firmwareMatch1.1.0.9

ciscorv110w_firmwareMatch1.2.0.8

ciscorv110w_firmwareMatch1.2.0.9

ciscorv110w_firmwareMatch1.2.0.10

ciscorv110w_firmwareMatch1.2.0.14

ciscorv110w_firmwareMatch1.2.0.15

ciscorv110w_firmwareMatch1.2.0.99

ciscorv110w_firmwareMatch1.2.1.4

ciscorv110w_firmwareMatch1.2.1.7

ciscorv110w_firmwareMatch1.2.2.1

ciscorv110w_firmwareMatch1.2.2.4

ciscorv110w_firmwareMatch1.2.2.5

ciscorv110w_firmwareMatch1.2.2.8

ciscorv110w_firmwareMatch1.3.0.4

ciscorv110w_firmwareMatch1.3.0.7

ciscorv110w_firmwareMatch1.3.0.8

ciscorv110w_firmwareMatch1.3.0.99

ciscorv110w_firmwareMatch1.3.1.1

ciscorv110w_firmwareMatch1.3.1.4

ciscorv110w_firmwareMatch1.3.1.5

ciscorv110w_firmwareMatch1.3.1.7

AND

ciscorv110wMatch-

Node

ciscorv130_firmwareMatch1.0.0.2

ciscorv130_firmwareMatch1.0.0.21

ciscorv130_firmwareMatch1.0.0.30

ciscorv130_firmwareMatch1.0.1.1

ciscorv130_firmwareMatch1.0.1.3

ciscorv130_firmwareMatch1.0.1.6

ciscorv130_firmwareMatch1.0.1.99

ciscorv130_firmwareMatch1.0.2.7

ciscorv130_firmwareMatch1.0.2.99

ciscorv130_firmwareMatch1.0.3.14

ciscorv130_firmwareMatch1.0.3.16

ciscorv130_firmwareMatch1.0.3.22

ciscorv130_firmwareMatch1.0.3.28

ciscorv130_firmwareMatch1.0.3.44

ciscorv130_firmwareMatch1.0.3.45

ciscorv130_firmwareMatch1.0.3.51

ciscorv130_firmwareMatch1.0.3.52

ciscorv130_firmwareMatch1.0.3.54

ciscorv130_firmwareMatch1.0.3.55

ciscorv130_firmwareMatch1.1.0.5

ciscorv130_firmwareMatch1.1.0.6

ciscorv130_firmwareMatch1.1.0.9

ciscorv130_firmwareMatch1.2.0.8

ciscorv130_firmwareMatch1.2.0.9

ciscorv130_firmwareMatch1.2.0.10

ciscorv130_firmwareMatch1.2.0.14

ciscorv130_firmwareMatch1.2.0.15

ciscorv130_firmwareMatch1.2.0.99

ciscorv130_firmwareMatch1.2.1.4

ciscorv130_firmwareMatch1.2.1.7

ciscorv130_firmwareMatch1.2.2.1

ciscorv130_firmwareMatch1.2.2.4

ciscorv130_firmwareMatch1.2.2.5

ciscorv130_firmwareMatch1.2.2.8

ciscorv130_firmwareMatch1.3.0.4

ciscorv130_firmwareMatch1.3.0.7

ciscorv130_firmwareMatch1.3.0.8

ciscorv130_firmwareMatch1.3.0.99

ciscorv130_firmwareMatch1.3.1.1

ciscorv130_firmwareMatch1.3.1.4

ciscorv130_firmwareMatch1.3.1.5

ciscorv130_firmwareMatch1.3.1.7

AND

ciscorv130Match-

Node

ciscorv130w_firmwareMatch1.0.0.2

ciscorv130w_firmwareMatch1.0.0.21

ciscorv130w_firmwareMatch1.0.0.30

ciscorv130w_firmwareMatch1.0.1.1

ciscorv130w_firmwareMatch1.0.1.3

ciscorv130w_firmwareMatch1.0.1.6

ciscorv130w_firmwareMatch1.0.1.99

ciscorv130w_firmwareMatch1.0.2.7

ciscorv130w_firmwareMatch1.0.2.99

ciscorv130w_firmwareMatch1.0.3.14

ciscorv130w_firmwareMatch1.0.3.16

ciscorv130w_firmwareMatch1.0.3.22

ciscorv130w_firmwareMatch1.0.3.28

ciscorv130w_firmwareMatch1.0.3.44

ciscorv130w_firmwareMatch1.0.3.45

ciscorv130w_firmwareMatch1.0.3.51

ciscorv130w_firmwareMatch1.0.3.52

ciscorv130w_firmwareMatch1.0.3.54

ciscorv130w_firmwareMatch1.0.3.55

ciscorv130w_firmwareMatch1.1.0.5

ciscorv130w_firmwareMatch1.1.0.6

ciscorv130w_firmwareMatch1.1.0.9

ciscorv130w_firmwareMatch1.2.0.8

ciscorv130w_firmwareMatch1.2.0.9

ciscorv130w_firmwareMatch1.2.0.10

ciscorv130w_firmwareMatch1.2.0.14

ciscorv130w_firmwareMatch1.2.0.15

ciscorv130w_firmwareMatch1.2.0.99

ciscorv130w_firmwareMatch1.2.1.4

ciscorv130w_firmwareMatch1.2.1.7

ciscorv130w_firmwareMatch1.2.2.1

ciscorv130w_firmwareMatch1.2.2.4

ciscorv130w_firmwareMatch1.2.2.5

ciscorv130w_firmwareMatch1.2.2.8

ciscorv130w_firmwareMatch1.3.0.4

ciscorv130w_firmwareMatch1.3.0.7

ciscorv130w_firmwareMatch1.3.0.8

ciscorv130w_firmwareMatch1.3.0.99

ciscorv130w_firmwareMatch1.3.1.1

ciscorv130w_firmwareMatch1.3.1.4

ciscorv130w_firmwareMatch1.3.1.5

ciscorv130w_firmwareMatch1.3.1.7

AND

ciscorv130wMatch-

Node

ciscorv215w_firmwareMatch1.0.0.2

ciscorv215w_firmwareMatch1.0.0.21

ciscorv215w_firmwareMatch1.0.0.30

ciscorv215w_firmwareMatch1.0.1.1

ciscorv215w_firmwareMatch1.0.1.3

ciscorv215w_firmwareMatch1.0.1.6

ciscorv215w_firmwareMatch1.0.1.99

ciscorv215w_firmwareMatch1.0.2.7

ciscorv215w_firmwareMatch1.0.2.99

ciscorv215w_firmwareMatch1.0.3.14

ciscorv215w_firmwareMatch1.0.3.16

ciscorv215w_firmwareMatch1.0.3.22

ciscorv215w_firmwareMatch1.0.3.28

ciscorv215w_firmwareMatch1.0.3.44

ciscorv215w_firmwareMatch1.0.3.45

ciscorv215w_firmwareMatch1.0.3.51

ciscorv215w_firmwareMatch1.0.3.52

ciscorv215w_firmwareMatch1.0.3.54

ciscorv215w_firmwareMatch1.0.3.55

ciscorv215w_firmwareMatch1.1.0.5

ciscorv215w_firmwareMatch1.1.0.6

ciscorv215w_firmwareMatch1.1.0.9

ciscorv215w_firmwareMatch1.2.0.8

ciscorv215w_firmwareMatch1.2.0.9

ciscorv215w_firmwareMatch1.2.0.10

ciscorv215w_firmwareMatch1.2.0.14

ciscorv215w_firmwareMatch1.2.0.15

ciscorv215w_firmwareMatch1.2.0.99

ciscorv215w_firmwareMatch1.2.1.4

ciscorv215w_firmwareMatch1.2.1.7

ciscorv215w_firmwareMatch1.2.2.1

ciscorv215w_firmwareMatch1.2.2.4

ciscorv215w_firmwareMatch1.2.2.5

ciscorv215w_firmwareMatch1.2.2.8

ciscorv215w_firmwareMatch1.3.0.4

ciscorv215w_firmwareMatch1.3.0.7

ciscorv215w_firmwareMatch1.3.0.8

ciscorv215w_firmwareMatch1.3.0.99

ciscorv215w_firmwareMatch1.3.1.1

ciscorv215w_firmwareMatch1.3.1.4

ciscorv215w_firmwareMatch1.3.1.5

ciscorv215w_firmwareMatch1.3.1.7

AND

ciscorv215wMatch-

VendorProductVersionCPE
ciscorv110w_firmware1.0.0.2cpe:2.3:o:cisco:rv110w_firmware:1.0.0.2:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.0.21cpe:2.3:o:cisco:rv110w_firmware:1.0.0.21:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.0.30cpe:2.3:o:cisco:rv110w_firmware:1.0.0.30:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.1.1cpe:2.3:o:cisco:rv110w_firmware:1.0.1.1:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.1.3cpe:2.3:o:cisco:rv110w_firmware:1.0.1.3:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.1.6cpe:2.3:o:cisco:rv110w_firmware:1.0.1.6:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.1.99cpe:2.3:o:cisco:rv110w_firmware:1.0.1.99:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.2.7cpe:2.3:o:cisco:rv110w_firmware:1.0.2.7:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.2.99cpe:2.3:o:cisco:rv110w_firmware:1.0.2.99:*:*:*:*:*:*:*
ciscorv110w_firmware1.0.3.14cpe:2.3:o:cisco:rv110w_firmware:1.0.3.14:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	rv110w_firmware	1.0.0.2	cpe:2.3:o:cisco:rv110w_firmware:1.0.0.2:::::::*
cisco	rv110w_firmware	1.0.0.21	cpe:2.3:o:cisco:rv110w_firmware:1.0.0.21:::::::*
cisco	rv110w_firmware	1.0.0.30	cpe:2.3:o:cisco:rv110w_firmware:1.0.0.30:::::::*
cisco	rv110w_firmware	1.0.1.1	cpe:2.3:o:cisco:rv110w_firmware:1.0.1.1:::::::*
cisco	rv110w_firmware	1.0.1.3	cpe:2.3:o:cisco:rv110w_firmware:1.0.1.3:::::::*
cisco	rv110w_firmware	1.0.1.6	cpe:2.3:o:cisco:rv110w_firmware:1.0.1.6:::::::*
cisco	rv110w_firmware	1.0.1.99	cpe:2.3:o:cisco:rv110w_firmware:1.0.1.99:::::::*
cisco	rv110w_firmware	1.0.2.7	cpe:2.3:o:cisco:rv110w_firmware:1.0.2.7:::::::*
cisco	rv110w_firmware	1.0.2.99	cpe:2.3:o:cisco:rv110w_firmware:1.0.2.99:::::::*
cisco	rv110w_firmware	1.0.3.14	cpe:2.3:o:cisco:rv110w_firmware:1.0.3.14:::::::*

Rows per page:

1-10 of 1721

CNA Affected

[
  {
    "vendor": "Cisco",
    "product": "Cisco Small Business RV Series Router Firmware",
    "versions": [
      {
        "version": "1.0.0.30",
        "status": "affected"
      },
      {
        "version": "1.0.0.2",
        "status": "affected"
      },
      {
        "version": "1.0.0.21",
        "status": "affected"
      },
      {
        "version": "1.0.1.1",
        "status": "affected"
      },
      {
        "version": "1.0.1.3",
        "status": "affected"
      },
      {
        "version": "1.0.1.6",
        "status": "affected"
      },
      {
        "version": "1.0.1.99",
        "status": "affected"
      },
      {
        "version": "1.0.2.7",
        "status": "affected"
      },
      {
        "version": "1.0.2.99",
        "status": "affected"
      },
      {
        "version": "1.0.3.14",
        "status": "affected"
      },
      {
        "version": "1.0.3.16",
        "status": "affected"
      },
      {
        "version": "1.0.3.22",
        "status": "affected"
      },
      {
        "version": "1.0.3.28",
        "status": "affected"
      },
      {
        "version": "1.0.3.44",
        "status": "affected"
      },
      {
        "version": "1.0.3.45",
        "status": "affected"
      },
      {
        "version": "1.0.3.51",
        "status": "affected"
      },
      {
        "version": "1.0.3.52",
        "status": "affected"
      },
      {
        "version": "1.0.3.54",
        "status": "affected"
      },
      {
        "version": "1.0.3.55",
        "status": "affected"
      },
      {
        "version": "1.1.0.5",
        "status": "affected"
      },
      {
        "version": "1.1.0.6",
        "status": "affected"
      },
      {
        "version": "1.1.0.9",
        "status": "affected"
      },
      {
        "version": "1.2.0.10",
        "status": "affected"
      },
      {
        "version": "1.2.0.14",
        "status": "affected"
      },
      {
        "version": "1.2.0.15",
        "status": "affected"
      },
      {
        "version": "1.2.0.8",
        "status": "affected"
      },
      {
        "version": "1.2.0.9",
        "status": "affected"
      },
      {
        "version": "1.2.0.99",
        "status": "affected"
      },
      {
        "version": "1.2.1.4",
        "status": "affected"
      },
      {
        "version": "1.2.1.7",
        "status": "affected"
      },
      {
        "version": "1.2.2.1",
        "status": "affected"
      },
      {
        "version": "1.2.2.4",
        "status": "affected"
      },
      {
        "version": "1.2.2.5",
        "status": "affected"
      },
      {
        "version": "1.2.2.8",
        "status": "affected"
      },
      {
        "version": "1.3.0.4",
        "status": "affected"
      },
      {
        "version": "1.3.0.7",
        "status": "affected"
      },
      {
        "version": "1.3.0.8",
        "status": "affected"
      },
      {
        "version": "1.3.0.99",
        "status": "affected"
      },
      {
        "version": "1.3.1.1",
        "status": "affected"
      },
      {
        "version": "1.3.1.4",
        "status": "affected"
      },
      {
        "version": "1.3.1.5",
        "status": "affected"
      },
      {
        "version": "1.3.1.7",
        "status": "affected"
      }
    ]
  }
]

References

sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-stack-SHYv2f5N

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

48.0%

JSON

Related for CVE-2023-20250