Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35166)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

CVE-2020-3286: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3268: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35159)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which originates from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker...

CVE-2020-3269: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35163)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A command injection vulnerability exists in the Web management interface of several Cisco products, which stems from the program failing to properly validate user-submitted input, and can be exploited by a remote attacker to...

CVE-2020-3279: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

CVE-2020-3355: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficient inpu...

Cisco IOS XR Access Control Error Vulnerability (CNVD-2020-34297)

Cisco IOS XR is a set of operating systems developed by the American company Cisco Cisco for its network equipment. An access control error vulnerability exists in the ACL function of the alternate route processor management interface in Cisco IOS XR Software. A remote attacker could exploit this...

CVE-2020-3274: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

CVE-2020-3296: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3293: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3287: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3295: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3294: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...

CVE-2020-3275: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected...

CVE-2020-3354: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker with administrative credentials to conduct a cross-site scripting XSS attack against a user of the interface. The vulnerability is due to insufficient inpu...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-36258)

Cisco Small Business RV016 Multi-WAN VPN, etc. are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program's failure to properly restrict user input boundaries, and can be exploited by a remote...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-34324)

Cisco Small Business RV320 and others are a VPN router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from a program that fails to properly restrict user input boundaries and can be exploited by a remote attacker with...

CVE-2020-3291: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected...