The vulnerabilities of Cisco RV110W network interface cards’ microprogramming software, as well as Cisco RV215W and Cisco RV130W wireless routers’ software, allow attackers to execute arbitrary code with superuser privileges.

The vulnerability of the web interfaces of Cisco RV110W microprogramming network interface cards, as well as Cisco RV215W and Cisco RV130W wireless routers, exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2016-1398

CVE-2016-1398 describes a buffer overflow in the web-based management interface of Cisco RV110W, RV130W, and RV215W routers. The vulnerability arises from improper sanitization of user-supplied input in HTTP requests used to configure the devices via the web UI, allowing an authenticated remote a...

CVE-2016-1398

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware through 1.2.1.4, RV130W devices with firmware through 1.0.2.7, and RV215W devices with firmware through 1.3.0.7 allows remote authenticated users to cause a denial of service device reload via a crafted HT...

CVE-2016-1396

Cross-site scripting XSS vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to inject arbitrary web script or HTML via a...

Code injection

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428...

Buffer overflow

Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote authenticated users to cause a denial of service device reload via crafted...

CVE-2016-1395

CVE-2016-1395 affects Cisco RV110W, RV130W, and RV215W routers. The web-based management interface vulnerable due to insufficient sanitization of HTTP input, enabling unauthenticated remote code execution as root via a crafted HTTP request. Affected firmware versions are before 1.2.1.7 (RV110W), ...

CVE-2016-1395

The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote attackers to execute arbitrary code as root via a crafted HTTP request, aka Bug ID CSCux82428...

CVE-2016-1397

Cisco RV110W/RV130W/RV215W routers are affected by a buffer overflow in the web-based management HTTP interface triggered by crafted configuration commands. The issue allows an authenticated remote user to cause a DoS (device reload). Affected firmware versions are pre-1.2.1.7 (RV110W), pre-1.0.3...

CVE-2016-1396

CVE-2016-1396 is an XSS vulnerability in the web-based management interface of Cisco RV110W (firmware < 1.2.1.7), RV130W (firmware < 1.0.3.16), and RV215W (firmware

Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a...

Cisco RV110W, RV130W, and RV215W Routers HTTP Request Buffer Overflow Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an authenticated, remote attacker to cause a buffer overflow on a targeted system, resulting in a...

Cisco RV110W/RV130W/RV215W Router HTTP Request Buffer Overflow Vulnerability

The Cisco RV130W Wireless-N is a multifunction VPN router; the Cisco RV110W/RV215W is a router that combines wired/wireless network connectivity, VPN, and firewall features. The Cisco RV110W/RV130W/RV215W routers have an HTTP request buffer overflow vulnerability that allows an unauthenticated,...

Cisco RV110W, RV130W, and RV215W Routers XSS Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

Cisco RV110W, RV130W, and RV215W Routers Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewalls, Cisco RV130W Wireless-N Multifunction VPN Routers, and Cisco RV215W Wireless-N VPN Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

Cisco Releases Security Updates

Cisco has released security updates to address vulnerabilities in the web-based management interface of three wireless routers models RV110W, RV130W, and RV215W. Exploitation of one of these vulnerabilities could allow a remote attacker to take control of an affected system. US-CERT encourages...