32 matches found
CVE-2019-1653
CVE-2019-1653 Cisco Small Business RV320和RV325双千兆WAN VPN路由器的基于Web的管理接口中存在一个漏洞，可能允许未经身份验证的远程攻击者检索敏感信息。 这个简单的Python脚本是针对CVE-2019-1653的自动化利用工具，可感染Cisco Small Business RV320和RV325设备。所利用的第一个漏洞是敏感信息泄露（SIE），未经身份验证的攻击者可以窃取凭证以进入路由器仪表盘，并在生成证书页面上执行命令注入，从而开放telnet端口，使攻击者能够对易受攻击的设备进行进一步的入侵。...
CiscoExploit
CiscoExploit Cisco 扫描（IP/端口/主机名/引导/版本） https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure 远程代码执行 https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP 远程代码执行 https://github.com/artkond/cisco-snmp-rc...
nuclei-CiscoRV320Dump-CVE-2019-1653
Cisco 路由器配置暴露漏洞 漏洞描述 本仓库详细说明了某些 Cisco 路由器中一个漏洞的利用过程，该漏洞允许通过可公开访问的 URL 暴露 config.exp 配置文件。该文件可能包含敏感信息，包括凭据（USERNAME 和 PASSWD）、网络配置以及其他关键系统详细信息。如果可在无需身份验证的情况下访问，则可能危及设备及其所在网络的安全。 相关 CVE 该漏洞可能涉及 CVE-2003-1567 和 CVE-2019-1653，两者均与 Cisco 设备中配置文件的未授权暴露有关，不过仍需调查具体设备和固件是否适用于这些 CVE。 逐步利用指南 该过程使用 Shodan...
CiscoSpill
CiscoSpill 一个使用 CVE-2019-1653 提取密码的概念验证工具。 CVE-2019-1653 Cisco Small Business RV320 和 RV325 双千兆 WAN VPN 路由器的基于 Web 的管理接口中存在一个漏洞，可能允许未经身份验证的远程攻击者检索敏感信息。该漏洞是由于对 URL 的访问控制不当造成的。攻击者可以通过 HTTP 或 HTTPS 连接到受影响的设备并请求特定的 URL 来利用此漏洞。成功利用后，攻击者可以下载路由器配置或详细的诊断信息。 免责声明...
CiscoRV320Dump
CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 用于转储 Cisco RV320 配置并获取 RCE 的漏洞利用 由 Red Team Pentesting GmbH 披露的 CVE-2019-1652 和 CVE-2019-1653 漏洞利用实现。 我仅在 RV320 上测试过，但根据 Cisco 公告，RV325 也存在漏洞。 以下 Shodan 查询语句可用于发现这些设备，如果你好奇有多少设备暴露在外。似乎数量不少... ssl:RV320 ssl:RV325 port:161 RV325 port:161 RV320 这些漏洞允许以下操作：...
CVE-2023-20117
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilitie...
PT-2023-3314 · Cisco · Cisco Small Business Rv320 +1
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description: The web-based management interface of the affected devices has insufficient validation of user-supplied input, which could allow an...
Cisco Small Business 操作系统命令注入漏洞
Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV320 and RV325. An attacker with valid administrator credentials could use this vulnerability to execute arbitrary commands as root on the underlying Linux operating system of the affecte...
Multiple Cisco Products OS Command Injection Vulnerabilities
The Cisco Small Business RV Series Routers is an RV series router from Cisco. An operating system command injection vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers, which can be exploited by an authenticated, remote attacker to inject arbitra...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for cleaning input data. Exploiting this vulnerability...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.
The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...
VulnCheck KEV: CVE-2019-1652
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands...
VulnCheck KEV: CVE-2019-1653
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information...
Cisco RV320 < 1.4.2.22 Multiple Vulnerabilities
Binary data 700566.prm...
Cisco RV320 Version Detection (SNMP)
Binary data 700563.prm...
Cisco Small Business RV320 and Cisco Small Business RV325 Encryption Issues Vulnerabilities
The Cisco Small Business RV320 and the Cisco Small Business RV325 are both a VPN router from Cisco. The Cisco Small Business RV320 and Cisco Small Business RV325 have an encryption vulnerability that arises from a network system or product that does not properly use the relevant cryptographic...
CVE-2019-1827
A vulnerability in the Online Help web service of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting XSS attack against a user of the service. The vulnerability exists because the Online Hel...