CVE-2020-3144

CVE-2020-3144 affects Cisco RV110W, RV130, RV130W, and RV215W routers. The web-based management interface is vulnerable to an unauthenticated, remote attacker bypassing authentication due to improper session management, enabling execution of arbitrary commands with administrative privileges via a...

Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied...

Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

Buffer Overflow Vulnerability in Multiple Cisco Products (CNVD-2020-35167)

Cisco RV110W and others are a VPN firewall router from Cisco USA. A buffer overflow vulnerability exists in the Web management interface of several Cisco products, which arises from the program's failure to properly restrict user input boundaries and can be exploited by a remote attacker with a...

Command Injection Vulnerability in Multiple Cisco Products (CNVD-2020-35164)

Cisco RV110W and others are a VPN firewall router from Cisco USA. A command injection vulnerability exists in several Cisco products. The vulnerability stems from the failure of the web interface to properly validate user-submitted input and can be exploited by an attacker to execute arbitrary...

Cisco RV110W/RV130(W)/RV215W Routers Management Interface - Remote Command Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework linux/armle/meterpreter/bindtcp - segfault linux/armle/meterpreter/reversetcp - segfault linux/armle/meterpreterreversehttp - works linux/armle/meterpreterreversehttps -...

Cisco RV110W / RV130(W) / RV215W Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework linux/armle/meterpreter/bindtcp - segfault linux/armle/meterpreter/reversetcp - segfault linux/armle/meterpreterreversehttp - works linux/armle/meterpreterreversehttps -...

The vulnerability in the web-based management interfaces of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers allows a attacker to cause service interruptions.

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router web management interfaces is related to authentication process errors. Exploiting this vulnerability can allow an attacker to disable clients...

The vulnerability in the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router’s web management interface, related to input processing errors, allows a perpetrator to trigger a service failure.

The vulnerabilities of the Cisco RV110W Wireless-N VPN Firewall, the Cisco RV130W Wireless-N Multifunction VPN Router, and the Cisco RV215W Wireless-N VPN Router involve input handling errors. Exploitation of these vulnerabilities can allow a malicious actor to trigger a Denial-of-Service attack...

Cisco RV110W, RV130W, and RV215W Authorization Issues Vulnerabilities

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the web-based management interface in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to access information in the syslog file...

Cisco RV110W, RV130W, and RV215W Authorization Issue Vulnerabilities (CNVD-2019-18900)

Cisco?RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the Web-based management interface in the Cisco RV110W, RV130W, and RV215W, which stems from the program's failure to properly authorize HTTP requests and can be exploited by remote...

CVE-2019-1899

A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit...

Input validation

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denia...

CVE-2019-1899

The CVE-2019-1899 issue affects Cisco RV110W, RV130W, and RV215W routers’ web interface. An unauthenticated, remote attacker can retrieve the list of devices on the guest network due to improper authorization of a specific HTTP URI. This is an information-disclosure vulnerability with partial con...

CVE-2019-1897

Cisco CVE-2019-1897 affects RV110W, RV130W, and RV215W routers, where improper authorization of an HTTP request in the web-based management interface can allow an unauthenticated, remote attacker to disconnect clients on the guest network, causing a denial of service. The issue arises from an aut...

CVE-2019-1898

CVE-2019-1898 affects Cisco RV110W, RV130W, and RV215W routers. The issue is an information-disclosure vulnerability in the web-based management interface where improper HTTP authorization allows an unauthenticated, remote attacker to access the syslog file, exposing sensitive data. Impact is par...

CVE-2019-1843

The CVE-2019-1843 issue affects Cisco RV110W, RV130W, and RV215W routers. It stems from improper validation of user-supplied data in the web-based management interface, allowing an unauthenticated, remote attacker to send crafted HTTP requests to reload the device and cause a denial of service. T...

Cisco RV110W, RV130W, and RV215W Authorization Issue Vulnerabilities (CNVD-2019-25712)

Cisco RV110W and others are a VPN firewall router from Cisco USA. An authorization issue vulnerability exists in the Cisco RV110W, RV130W, and RV215W, which can be exploited by a remote attacker to obtain a list of devices connected to a guest network by accessing a URL on the web interface...

Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP...

Cisco RV110W, RV130W, and RV215W Routers Syslog Disclosure (cisco-sa-20190619-rv-fileaccess)

According to its self-reported version, the version of the Cisco Small Business Wireless-N VPN Router installed on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this to disclose potentially sensitive information. C Tenable...