CVE-2021-1174 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1175

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1175 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid admin credentials could remotely execute arbitrary code as root or cause a device rel...

CVE-2021-1175 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1176

CVE-2021-1176 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issues are in the web-based management interface where improper validation of user-supplied input could let an authenticated remote attacker run arbitrary code as root or trigger a device restart, potentiall...

CVE-2021-1195

Cisco CVE-2021-1195 affects the Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issues stem from improper validation in the web-based management interface and UPnP service, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device reload, causing...

CVE-2021-1194

CVE-2021-1194 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities arise from improper validation of input in the web-based management interface, allowing an authenticated attacker to execute arbitrary code as root or trigger a device reload (DoS) by sending...

High-Severity Cisco Flaw Found in CMX Software For Retailers

A high-severity flaw in Cisco’s smart Wi-Fi solution for retailers could allow a remote attacker to alter the password of any account user on affected systems. The vulnerability is part of a number of patches issued by Cisco addressing 67 high-severity CVEs on Wednesday. This included flaws found...

CVE-2021-1190

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers have multiple vulnerabilities in the web-based management interface due to improper validation of user-supplied input. An authenticated attacker with valid administrator credentials could trigger remote command execution or cause the ...

CVE-2021-1190 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1190 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1187

The CVE-2021-1187 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The web-based management interface is affected by multiple vulnerabilities caused by improper validation of user-supplied input. An authenticated attacker could exploit crafted HTTP requests to execut...

CVE-2021-1186

Cisco CVE-2021-1186 affects the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers via multiple vulnerabilities in the web-based management interface. The root cause is improper validation of user-supplied input in the web UI, exploitable by an authenticated attacker with valid admini...

CVE-2021-1185 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...

CVE-2021-1184

CVE-2021-1184 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device restart/DoS by sending crafted HTTP reques...

CVE-2021-1183

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1183 due to improper validation in the web-based management interface. An authenticated administrator could exploit crafted HTTP requests to potentially execute arbitrary code as root or cause a device restart (DoS)....

CVE-2021-1182

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are affected by CVE-2021-1182 due to improper validation of input in the web-based management interface. The vulnerability allows an authenticated attacker with admin credentials to send crafted HTTP requests to the device, potentially execu...

CVE-2021-1178

CVE-2021-1178 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue is in the web-based management interface and UPnP service, caused by improper validation of user-supplied input, enabling an authenticated attacker to remotely execute arbitrary code as root or cause a...

CVE-2021-1127 Cisco Enterprise NFV Infrastructure Software Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software NFVIS could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface. The vulnerability is due to improper input...

CVE-2021-1127

Cisco Enterprise NFV Infrastructure Software (NFVIS) web-based management interface is affected by a cross-site scripting (XSS) vulnerability caused by improper input validation of log file contents. An authenticated attacker could modify a log file to include malicious code and persuade a user t...

CVE-2021-1130

Cisco DNA Center suffers a Cross-Site Scripting (XSS) vulnerability in its web-based management interface. The flaw arises from improper validation of user-supplied input, enabling an authenticated attacker to lure a user into clicking a crafted link, which could allow execution of arbitrary scri...