EUVD-2020-24603

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Cisco Small Business Routers have a vulnerability allowing remote command injection via management interface

Reporter	Title	Published	Views	Family All 8
BDU FSTEC	The vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130 VPN Routers, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to execute arbitrary operating system commands.	21 Jul 202000:00	–	bdu_fstec
Cisco	Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	15 Jul 202016:00	–	cisco
Tenable Nessus	Cisco Small Business Routers Command Shell Injection (cisco-sa-cmd-shell-injection-9jOQn9Dy)	28 Aug 202000:00	–	nessus
CVE	CVE-2020-3332	16 Jul 202017:21	–	cve
Cvelist	CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	16 Jul 202017:21	–	cvelist
NVD	CVE-2020-3332	16 Jul 202018:15	–	nvd
Prion	Input validation	16 Jul 202018:15	–	prion
Vulnrichment	CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability	16 Jul 202017:21	–	vulnrichment

[
  {
    "enisaIdVendor": [
      {
        "id": "9d218a56-d759-39f7-8a41-b76b9bd9f7f3",
        "vendor": {
          "name": "Cisco"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "7b912f12-8e9b-326b-b766-14ec40974faf",
        "product": {
          "name": "Cisco RV130W Wireless-N Multifunction VPN Router Firmware"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmd-shell-injection-9jOQn9Dy
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

8.2High risk

Vulners AI Score8.2

CVSS 38.1

CVSS 3.18.8

CVSS 29

EPSS0.01467

SSVC

cisco routers vulnerability input validation command injection remote access