EUVD-2017-15674

Malware in sbrugna...

EUVD-2017-12999

Malware in sbrugna...

Design/Logic Flaw

A vulnerability in the Universal Plug-and-Play UPnP implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service DoS condition. The remote code execution could occur with root privileges...

CVE-2017-3882

A vulnerability in the Universal Plug-and-Play UPnP implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service DoS condition. The remote code execution could occur with root privileges...

CVE-2017-3882

A vulnerability in the Universal Plug-and-Play UPnP implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service DoS condition. The remote code execution could occur with root privileges...

CVE-2017-3882: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the Universal Plug-and-Play UPnP implementation in the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, Layer 2-adjacent attacker to execute arbitrary code or cause a denial of service DoS condition. The remote code execution could occur with root privileges...

PT-2017-16154

Name of the Vulnerable Software and Affected Versions Cisco CVR100W Wireless-N VPN Router versions prior to 1.0.1.22 Description A vulnerability in the Universal Plug-and-Play UPnP implementation could allow an unauthenticated attacker to execute arbitrary code or cause a denial of service...

Cisco CVR100W Wireless-N VPN Router Buffer Overflow Vulnerability

The CISCO CVR100W is a combination of wired/wireless network connectivity, VPN, firewall and many other features. A buffer overflow vulnerability exists in the Universal Plug-and-Play UPnP feature of the Cisco CVR100W Wireless-N VPN Router, where an unauthenticated attacker could execute arbitrar...

CVE-2017-6620

A vulnerability in the remote management access control list ACL feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress...

CVE-2017-6620: Improper Input Validation

A vulnerability in the remote management access control list ACL feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress...

PT-2014-3778

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions 1.2.0.9 and earlier Cisco RV215W versions 1.1.0.5 and earlier Cisco CVR100W versions 1.0.1.19 and earlier Description The issue concerns the web management interface of certain Cisco devices, where it fails to prevent the...

CVE-2014-0683: Undefined Security Weakness

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obta...