CVE-2021-1174 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1175

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1175 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid admin credentials could remotely execute arbitrary code as root or cause a device rel...

CVE-2021-1175 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1176

CVE-2021-1176 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issues are in the web-based management interface where improper validation of user-supplied input could let an authenticated remote attacker run arbitrary code as root or trigger a device restart, potentiall...

CVE-2021-1195

Cisco CVE-2021-1195 affects the Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issues stem from improper validation in the web-based management interface and UPnP service, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device reload, causing...

CVE-2021-1194

CVE-2021-1194 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities arise from improper validation of input in the web-based management interface, allowing an authenticated attacker to execute arbitrary code as root or trigger a device reload (DoS) by sending...

High-Severity Cisco Flaw Found in CMX Software For Retailers

A high-severity flaw in Cisco’s smart Wi-Fi solution for retailers could allow a remote attacker to alter the password of any account user on affected systems. The vulnerability is part of a number of patches issued by Cisco addressing 67 high-severity CVEs on Wednesday. This included flaws found...

CVE-2021-1190

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers have multiple vulnerabilities in the web-based management interface due to improper validation of user-supplied input. An authenticated attacker with valid administrator credentials could trigger remote command execution or cause the ...

CVE-2021-1190 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1187

The CVE-2021-1187 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The web-based management interface is affected by multiple vulnerabilities caused by improper validation of user-supplied input. An authenticated attacker could exploit crafted HTTP requests to execut...

CVE-2021-1184

CVE-2021-1184 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device restart/DoS by sending crafted HTTP reques...

CVE-2021-1182

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1182 due to improper validation of input in the web-based management interface. The vulnerability allows an authenticated attacker with admin credentials to send crafted HTTP requests to the device, potentially execu...

CVE-2021-1178

CVE-2021-1178 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue is in the web-based management interface and UPnP service, caused by improper validation of user-supplied input, enabling an authenticated attacker to remotely execute arbitrary code as root or cause a...

CVE-2021-1127 Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to improper input...

CVE-2021-1130

Cisco DNA Center suffers a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The flaw arises from improper validation of user-supplied input, enabling an authenticated attacker to lure a user into clicking a crafted link, which could allow execution of arbitrary scri...

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

CVE-2021-1130 Cisco DNA Center Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface...

CVE-2021-1245

The CVE-2021-1245 entry concerns Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor. The connected Cisco advisory sources confirm an XSS vulnerability in the web-based management interface caused by improper input validation. An unauthenticated, remote attacker can lure a user to click ...

CVE-2021-1246 Cisco Finesse OpenSocial Gadget Editor Unauthenticated Access Vulnerability

Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability A vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote...

CVE-2021-1239

CVE-2021-1239 refers to multiple stored XSS vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC). An authenticated, remote attacker could lure a user to click a crafted link, triggering arbitrary script execution or access to browser data due to inadequ...