CVE-2021-1148

The CVE-2021-1148 entry relates to multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The root cause is improper validation of user-supplied input in the web interface, enabling an authenticated attacker with valid adm...

CVE-2021-1150 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Command Injection Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of...

CVE-2021-1152 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1153 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1153

The CVE-2021-1153 entry corresponds to multiple stored cross-site scripting (XSS) vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Affected component: the web management UI; root cause: insufficient input validation in the in...

CVE-2021-1154

The CVE-2021-1154 entry covers stored Cross-Site Scripting in Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers’ web management interface. Multiple vulnerabilities stem from insufficient input validation in the authenticated web UI, enabling an authenticated attacker with valid admin...

CVE-2021-1155 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1157

CVE-2021-1157 corresponds to stored Cross‑Site Scripting vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue arises from insufficient input validation in the management UI, allowing an authenticated attacker with valid...

CVE-2021-1157 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1158 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1158 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting XSS attacks against a user of the interface. The vulnerabilities are due to insufficient...

CVE-2021-1160

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are vulnerable under CVE-2021-1160 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid administrator credentials could send crafted HTTP requests to the device, potent...

CVE-2021-1163

CVE-2021-1163 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers via multiple vulnerabilities in the web-based management interface. The issues arise from improper validation of user-supplied input, allowing an authenticated, remote attacker to execute arbitrary code as root o...

CVE-2021-1164

CVE-2021-1164 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerability stems from improper input validation in the web-based management interface, allowing an authenticated remote attacker with valid admin credentials to execute arbitrary code as root or trigger a...

CVE-2021-1166 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1167 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1169

CVE-2021-1169 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers, with multiple vulnerabilities in the web-based management interface caused by improper validation of user-supplied input. An authenticated attacker with administrator credentials can send crafted HTTP requests to the d...

CVE-2021-1172

The CVE-2021-1172 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers with multiple vulnerabilities in the web-based management interface stemming from improper input validation. An authenticated attacker could exploit crafted HTTP requests to execute arbitrary code as r...

CVE-2021-1173

CVE-2021-1173 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issues are multiple vulnerabilities in the web-based management interface (and UPnP per advisory) caused by improper validation of user-supplied input. An authenticated, remote attacker could craft HTTP requ...

CVE-2021-1174

The CVE-2021-1174 entry covers multiple vulnerabilities in Cisco Small Business RV110W/RV130/RV130W/RV215W routers’ web-based management interface. The issues arise from improper validation of user-supplied input, allowing an authenticated attacker with valid administrator credentials to craft HT...