35 matches found
CiscoExploit
CiscoExploit 시스코 스캔 IP/Port/HostName/Boot/Version https://www.cnblogs.com/k8gege/p/10679491.html CVE-2019-1821 Cisco Prime Infrastructure 원격 코드 실행 https://srcincite.io/blog/2019/05/17/panic-at-the-cisco-unauthenticated-rce-in-prime-infrastructure.html Cisco SNMP RCE...
CVE-2019-1653
CVE-2019-1653 Cisco Small Business RV320 및 RV325 듀얼 기가비트 WAN VPN 라우터의 웹 기반 관리 인터페이스에서 발견된 취약점으로, 인증되지 않은 원격 공격자가 민감한 정보를 검색할 수 있습니다. 이 간단한 Python 스크립트는 CVE-2019-1653에 대한 자동화 익스플로잇으로, Cisco Small Business RV320 및 RV325 장치를 감염시킵니다. 첫 번째로 악용되는 취약점은 SIE민감한 정보 노출, Sensitive Information Exposures로, 인증되...
CiscoSpill
CiscoSpill CVE-2019-1653을 사용하여 비밀번호를 추출하는 PoC 도구입니다. CVE-2019-1653 Cisco Small Business RV320 및 RV325 Dual Gigabit WAN VPN 라우터의 웹 기반 관리 인터페이스에서 취약점이 발견되어 인증되지 않은 원격 공격자가 민감한 정보를 검색할 수 있습니다. 이 취약점은 URL에 대한 부적절한 접근 제어로 인해 발생합니다. 공격자는 HTTP 또는 HTTPS를 통해 영향을 받는 장치에 연결하고 특정 URL을 요청하여 이 취약점을 악용할 수 있습니다...
CiscoRV320Dump
CiscoRV320Dump CVE-2019-1653/CVE-2019-1652 Cisco RV320 설정 덤프 및 RCE 획득을 위한 익스플로잇 Red Team Pentesting GmbH가 공개한 CVE-2019-1652 및 CVE-2019-1653 익스플로잇의 구현체입니다. RV320에서만 테스트했지만, Cisco 권고에 따르면 RV325도 취약합니다. 다음 Shodan 쿼리로 찾을 수 있는 것 같습니다. 얼마나 많은지 궁금하시다면요. 꽤 많은 것 같습니다... ssl:RV320 ssl:RV325 port:161 RV325...
nuclei-CiscoRV320Dump-CVE-2019-1653
Cisco Router Configuration Exposure Vulnerability 취약점 설명 이 저장소는 특정 Cisco 라우터에서 config.exp 구성 파일이 공개적으로 접근 가능한 URL을 통해 노출되는 취약점의 악용 과정을 자세히 설명합니다. 이 파일에는 자격 증명USERNAME 및 PASSWD, 네트워크 구성 및 기타 중요한 시스템 세부 정보를 포함한 민감한 정보가 포함될 수 있습니다. 인증 없이 접근 가능할 경우 장치 및 해당 장치가 배포된 네트워크의 보안을 손상시킬 수 있습니다. 관련 CVE 이 취약점은...
CVE-2023-20117
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilitie...
Cisco Small Business 操作系统命令注入漏洞
Cisco Small Business is a switch from Cisco USA. A security vulnerability exists in the Cisco Small Business RV320 and RV325. An attacker with valid administrator credentials could use this vulnerability to execute arbitrary commands as root on the underlying Linux operating system of the affecte...
PT-2023-3314 · Cisco · Cisco Small Business Rv320 +1
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers affected versions not specified Description: The web-based management interface of the affected devices has insufficient validation of user-supplied input, which could allow an...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
Multiple Cisco Products OS Command Injection Vulnerabilities
The Cisco Small Business RV Series Routers is an RV series router from Cisco. An operating system command injection vulnerability exists in the Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers, which can be exploited by an authenticated, remote attacker to inject arbitra...
Security Vulnerabilities in Multiple Cisco Products
Cisco RV016 Multi-WAN VPN Router is a VPN Virtual Private Network router. RV042 Dual WAN VPN Router is a VPN Virtual Private Network router. The RV042G Dual Gigabit WAN VPN Router is a VPN Virtual Private Network router. A security vulnerability exists in the Cisco Small Business RV016, RV042,...
PT-2021-1968
Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 affected versions not specified Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow an...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a perpetrator to execute arbitrary commands.
The vulnerability of the web-based management interfaces for Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 is related to the lack of measures for cleaning input data. Exploiting this vulnerability...
The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 allows a attacker to cause service failures or execute arbitrary code with root privileges.
The vulnerability in the web-based administration interface of Cisco Small Business RV320, Cisco Small Business RV325, Cisco Small Business RV016, Cisco Small Business RV042, and Cisco Small Business RV082 arises from an operation that goes beyond the buffer limits in memory. Exploiting this...
VulnCheck KEV: CVE-2019-1653
Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers contain improper access controls for URLs. Exploitation could allow an attacker to download the router configuration or detailed diagnostic information...
VulnCheck KEV: CVE-2019-1652
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands...
PT-2019-4323
Name of the Vulnerable Software and Affected Versions Cisco RV320 and Cisco RV325 affected versions not specified Description The issue is related to the presence of a hardcoded X.509 certificate key pair and a static Secure Shell SSH host key in the firmware of the affected devices. This could...
PT-2019-4324
Name of the Vulnerable Software and Affected Versions Cisco RV320 and Cisco RV325 affected versions not specified Description The issue is related to the use of hardcoded credentials in the etc/shadow component of the Cisco RV320 and Cisco RV325 router firmware. This could allow a remote attacker...
