Cisco RV110W, RV130W, and RV215W Authorization Issue Vulnerabilities (CNVD-2019-25712)

Cisco RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to obtain a list of devices connected to a guest network by accessing a URL on the web interface...

The vulnerability of the web interfaces of Cisco RV320 and Cisco RV325 microprogrammed software routers allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the web interfaces of Cisco RV320 and Cisco RV325 router microprogramming software is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability could allow a remote attacker to execute a “man-in-the-middle” type attack...

Cisco ASR 9000 Series Aggregation Services Routers IOS XR Software Denial of Service Vulnerability

Cisco IOS XR Software is the United States Cisco Cisco company's IOS software series including IOS T, IOS S and IOS XR in a fully modular, distributed network operating system. Cisco ASR 9000 Series Aggregation Services Routers IOS XR Software denial of service vulnerability can be exploited by a...

CVE-2019-1710

A vulnerability in the sysadmin virtual machine VM on Cisco ASR 9000 Series Aggregation Services Routers running Cisco IOS XR 64-bit Software could allow an unauthenticated, remote attacker to access internal applications running on the sysadmin VM. The vulnerability is due to incorrect isolation...

Vulnerability in the authentication subsystem of the Cisco IOS XE operating system, allowing a perpetrator to execute arbitrary commands with elevated privileges

The vulnerability in the Cisco IOS XE operating system’s authentication subsystem exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with elevated privileges via the web interface...

Cisco Small Business RV320 and RV325 Command Injection Vulnerabilities

The Cisco Small Business RV320 and RV325 are both enterprise-class routers from Cisco USA. A command injection vulnerability exists in the Cisco Small Business RV320 and RV325 with firmware versions 1.4.2.15 through 1.4.2.19. The vulnerability, which stems from the program failing to properly...

Exploit for Improper Input Validation in Cisco Rv320_Firmware

CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Exploits For Dumpin...

The vulnerability of the user web interface of the Cisco IOS XE operating system allows a hacker to trigger a service failure.

The vulnerability of the user-facing web interface of the Cisco IOS XE operating system is due to the repeated release of memory. Exploiting this vulnerability allows a malicious actor to trigger a device reboot and a service failure through specially crafted HTTP requests...

Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall Information Disclosure Security Vulnerability

Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall are both products of Cisco.Cisco RV180W Wireless-N Multifunction VPN Router is a router product. The Cisco RV180W Wireless-N Multifunction VPN Router is a router and the Small...

Multiple Cisco Products IOS XE Software Elevation of Privilege Vulnerability

Cisco 4000 Series Integrated Services Routers and others are different models of router products from Cisco USA. in which IOS XE Software is used. an operating system developed by Cisco for its network devices. An elevation of privilege vulnerability exists in the shell access request mechanism o...

CVE-2018-0466

A vulnerability in the Open Shortest Path First version 3 OSPFv3 implementation in Cisco IOS and IOS XE Software could allow an unauthenticated, adjacent attacker to cause an affected device to reload. The vulnerability is due to incorrect handling of specific OSPFv3 packets. An attacker could...

Cisco RV110W, RV130W, RV215W Directory Traversal Vulnerability

The RV110W is a Wireless-N VPN firewall router.The RV130W is a Wireless-N multifunction VPN router.The RV215W is a Wireless-N VPN router. A directory traversal vulnerability exists in the web-based management interface of the Cisco RV110W, RV130W, and RV215W routers. The vulnerability stems from...

The vulnerability in the web interface of the Cisco IOS XE operating system, which allows a hacker to increase their privileges.

The vulnerability of the Cisco IOS operating system’s web interface is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges by using the VTY interface...

The vulnerability of the web interface of the microprogramming software for Cisco RV132W VPN routers, ADSL2+ and Cisco RV134W VDSL2, allows a perpetrator to execute arbitrary code with root privileges and gain full control over the device.

The vulnerability of the web interface of Microprogramming Software-based Cisco RV132W ADSL2+ and Cisco RV134W VDSL2 routers is due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor, operating remotely, to execute arbitrary code with root privileges...

Cisco ASR 5700 Series Router Input Validation Vulnerability

The Cisco Aggregation Services Router ASR 5000 Series Routers and Virtualized Packet Core VPC System Software are both products of Cisco, Inc. The Cisco Aggregation Services Router ASR 5000 Series Routers are a 5000 series of secure router appliances.The Virtualized Packet Core VPC System Softwar...

Cisco IOS Software and IOS XE Software Denial of Service Vulnerability (CNVD-2018-07302)

Cisco IOS Software and IOS XE Software are both operating systems developed by Cisco for its network devices. An input validation vulnerability exists in the DHCP option 82 encapsulation feature in Cisco IOS Software and IOS XE Software, which arises from the program's failure to perform full inp...

CVE-2018-0169

Multiple vulnerabilities in the CLI parser of Cisco IOS XE Software could allow an authenticated, local attacker to gain access to the underlying Linux shell of an affected device and execute arbitrary commands with root privileges on the device. The vulnerabilities are due to the affected softwa...

Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router Remote Command Execution Vulnerability

The Cisco RV132W ADSL2+ Wireless-N VPN Routers and the RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. A remote command execution vulnerability exists in the Cisco RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. The vulnerability stems from the program's...

Multiple Cisco Wireless VPN Routers Information Disclosure Vulnerabilities

The Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers are both Cisco routers. web interface is one of the web interfaces. An information disclosure vulnerability exists in the Web interface in the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Router...

CVE-2018-0136

A vulnerability in the IPv6 subsystem of Cisco IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router ASR 9000 Series could allow an unauthenticated, remote attacker to trigger a reload of one or more Trident-based line cards, resulting in a denial of service DoS condition. The...