CVE-2021-1290 Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP...

CVE-2021-1290

CVE-2021-1290 covers multiple Cisco Small Business RV160/RV160W/RV260/RV260P/RV260W routers. The root cause is improper validation of HTTP requests in the web-based management interface, allowing an unauthenticated, remote attacker to execute arbitrary code as root via a crafted HTTP request. Doc...