CVE-2017-3882: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Universal Plug-and-Play UPnP implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service DoS condition. The remote code execution could occur with root privileges...

PT-2017-16154

Name of the Vulnerable Software and Affected Versions Cisco CVR100W Wireless-N VPN Router versions prior to 1.0.1.22 Description A vulnerability in the Universal Plug-and-Play UPnP implementation could allow an unauthenticated attacker to execute arbitrary code or cause a denial of service...

CVE-2017-6620

A vulnerability in the remote management access control list ACL feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress...

CVE-2017-6620: Improper Input Validation

A vulnerability in the remote management access control list ACL feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress...

PT-2017-17191

Name of the Vulnerable Software and Affected Versions Cisco CVR100W Wireless-N VPN Router versions prior to 1.0.1.24 Description A vulnerability in the remote management access control list ACL feature could allow an unauthenticated, remote attacker to bypass the remote management ACL. This is du...