CVE-2019-15957 Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands will be executed wit...

CVE-2019-15957

CVE-2019-15957 affects Cisco Small Business RV Series Routers (RV016, RV042, RV042G, RV082, RV320, RV325). The web-based management interface fails to validate user input, allowing an authenticated admin to inject and execute arbitrary commands on the device with root privileges. Affected firmwar...

CVE-2019-15957 Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands will be executed wit...

CVE-2019-15959

The Cisco Small Business SPA500 Series IP Phones vulnerability (CVE-2019-15959) concerns local script execution via the device’s USB interface due to preinstalled development/testing scripts. A physically proximate attacker could insert a USB storage device to run scripts with elevated privileges...

CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

CVE-2019-15993 Cisco Small Business Switches Information Disclosure Vulnerability

A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could...

CVE-2019-15993

CVE-2019-15993 affects Cisco Small Business Switches web UI, where insufficient authentication allows unauthenticated remote access to sensitive information (including configuration files) via crafted HTTP requests. Root cause: lack of proper authentication controls for web UI data. Affected: Cis...

Denial of Service Vulnerability in Omron Small PLC Series CP1L (CNVD-2020-58493)

CP1L is Omron's compact PLC series, an all-in-one PLC with built-in pulse output, analog input/output, and serial communication functions. A denial of service vulnerability exists in Omron Small PLC Series CP1L, which can be exploited by attackers to cause a device connection to be interrupted...

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340 Series allows a hacker to execute arbitrary commands.

The vulnerability in the web-based management interface of Cisco Small Business RV340 Series microprogrammed software routers involves the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...

Cisco Dual WAN Gigabit VPN Routers < 1.0.03.18 SSL RCE and DoS (cisco-sa-sb-rce-dos-9ZAjkx4)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by a RCE and DoS vulnerability in the Secure Sockets Layer SSL VPN feature due to improper validation of HTTP requests. By sending a crafted HTTP request to the device, an unauthenticated, remote...

SMB Cybersecurity Catching Up to Enterprise… But the Human Element Still a Major Concern

Cyberattacks on small to medium-sized businesses SMBs are continuing at a relentless pace, with the vast majority of data breaches coming from outside the organization. Some believe hackers are aggressively targeting these smaller firms because they believe SMBs lack adequate resources and...

CVE-2020-3451

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...

CVE-2020-3451

Cisco CVE-2020-3451 affects the Cisco Small Business RV340 Series Routers web-based management interface. Public details (ZDI/Nessus/Cisco advisory) describe a command injection/remote code execution flaw in the upload.cgi handler, caused by improper validation of a user-supplied string used in a...

CVE-2020-3451 Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...

CVE-2020-3453

Cisco RV340 Series Routers are affected by multiple web-management vulnerabilities leading to remote code execution when authenticated with admin credentials. The ZDI advisory specifies a stack-based buffer overflow in upload.cgi that allows network-adjacent attackers to execute code with the www...

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers < 1.0.03.18 SSL DoS (cisco-sa-sb-dos-ZN5GvNH7)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is prior to 1.0.03.18. It is, therefore, affected by a DoS vulnerability in the Secure Sockets Layer SSL VPN feature due to a lack of proper validation of HTTP requests. An unauthenticated, remote attacker coul...

The vulnerability of Cisco Small Business network device software related to IPv6 traffic processing errors allows a perpetrator to cause service interruptions.

The vulnerability of Cisco Small Business network devices’ microprogramming software is related to errors in handling IPv6 traffic. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information about these vulnerabilities, s...

Cisco Small Business Routers Command Shell Injection (cisco-sa-cmd-shell-injection-9jOQn9Dy)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by a command shell injection vulnerability in the web-based management interface due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a...

CVE-2020-3496

A vulnerability in the IPv6 packet processing engine of Cisco Small Business Smart and Managed Switches could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient validation of incoming IPv6 traffic. A...