Input validation

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...

Input validation

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input...

Default credentials

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

CVE-2020-3358

Cisco Small Business RV Series (RV340, RV340W, RV345, RV345P) SSL VPN vulnerability (CVE-2020-3358) stems from improper input validation of HTTP requests in the SSL VPN feature, allowing an unauthenticated remote attacker to trigger a device reload and DoS. Affected firmware before 1.0.03.18 is v...

CVE-2020-3357

Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers with SSL VPN enabled are affected by CVE-2020-3357. The vulnerability stems from improper validation of HTTP requests over SSL, allowing an unauthenticated, remote attacker to execute arbitrary code on the device o...

CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input...

CVE-2020-3332 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input...

CVE-2020-3332

The CVE-2020-3332 issue affects Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers. It is a vulnerability in the web-based management interface caused by insufficient input validation of user-supplied data, allowing an authenticated, remote attacker to inject arbitrary shell co...

CVE-2020-3330 Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

CVE-2020-3330 Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability

A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static...

CVE-2020-3330

The CVE-2020-3330 issue affects Cisco Small Business RV110W Wireless-N VPN Firewall Routers, specifically the Telnet service. A default static system credential enables an unauthenticated, remote attacker to gain full control of the device with a high-privilege account. The vulnerability stems fr...

CVE-2020-3323

CVE-2020-3323 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerability arises from improper validation of user-supplied input in the web-based management interface, enabling an unauthenticated, remote attacker to craft HTTP requests that could execute arbitrary co...

CVE-2020-3323 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...

CVE-2020-3323 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...

CVE-2020-3150

Cisco Small Business RV110W and RV215W Series Routers expose a information-disclosure vulnerability via the web-based management interface. The issue stems from improper HTTP request authorization, allowing an unauthenticated attacker to view sensitive data (including device configuration) by acc...

CVE-2020-3150 Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote attacker to download sensitive information from the device, which could include the device configuration. The vulnerability is due to improper...

Small CRM 'email' SQL Injection Vulnerability

Small CRM is a popular customer management system for small businesses. Small CRM 'email' SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input...

Cisco Small Business RV110W and RV215W Series Routers Information Disclosure Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W and RV215W Series Routers could allow an unauthenticated, remote attacker to download sensitive information from the device, which could include the device configuration. The vulnerability is due to improper...

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...