CVE-2021-1196

The CVE-2021-1196 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. Affects the web-based management interface and is due to improper validation of user-supplied input. An authenticated, remote attacker with valid administrator credentials could send crafted HTTP requ...

CVE-2021-1168

The CVE-2021-1168 set affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The root cause is improper validation of user-supplied input in the web-based management interface and UPnP component, enabling an authenticated, remote attacker to run arbitrary code as root or trigger ...

CVE-2021-1174

The CVE-2021-1174 entry covers multiple vulnerabilities in Cisco Small Business RV110W/RV130/RV130W/RV215W routers’ web-based management interface. The issues arise from improper validation of user-supplied input, allowing an authenticated attacker with valid administrator credentials to craft HT...

CVE-2021-1178

CVE-2021-1178 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue is in the web-based management interface and UPnP service, caused by improper validation of user-supplied input, enabling an authenticated attacker to remotely execute arbitrary code as root or cause a...

CVE-2021-1194

CVE-2021-1194 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities arise from improper validation of input in the web-based management interface, allowing an authenticated attacker to execute arbitrary code as root or trigger a device reload (DoS) by sending...

CVE-2021-1206

Cisco Small Business RV110W/RV130/RV130W/RV215W routers suffer multiple vulnerabilities in the web-based management interface due to improper input validation. An authenticated attacker with valid admin credentials could exploit crafted HTTP requests to execute arbitrary code as root or cause a d...

CVE-2021-1207

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers suffer web-based management interface input validation vulnerabilities that can allow an authenticated attacker to execute arbitrary code as root or cause a device restart (DoS) via crafted HTTP requests. Exploitation requires valid a...

CVE-2021-1212

Cisco Small Business RV110W/RV130/RV130W/RV215W routers contain web-based management interface input validation vulnerabilities that require valid administrator credentials to exploit. An authenticated attacker could send crafted HTTP requests to execute arbitrary code as root or cause a device r...

CVE-2021-1156

CVE-2021-1156 : Affected devices are Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The stored cross-site scripting (XSS) vulnerabilities exist in the web-based management interface due to insufficient input validation in the handling of requests. An authenticated administrator c...

CVE-2021-1171

The CVE-2021-1171 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. The issue stems from improper validation of user-supplied input in the web-based management interface, allowing an authenticated attacker with valid administrator credentials to send crafted HTTP requ...

CVE-2021-1209

CVE-2021-1209 concerns multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The flaws stem from improper validation of user-supplied input in the web UI, allowing an authenticated attacker with valid admin credentials to...

CVE-2021-1215

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers allow an authenticated attacker with valid administrator credentials to send crafted HTTP requests that could execute arbitrary code as root or cause a device reload (D...

CVE-2021-1158

CVE-2021-1158 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue is stored cross-site scripting in the web-based management interface caused by insufficient input validation. An authenticated administrator can send crafted HTTP requests to trigger script execution i...

CVE-2021-1172

The CVE-2021-1172 entry concerns Cisco Small Business RV110W, RV130, RV130W, and RV215W routers with multiple vulnerabilities in the web-based management interface stemming from improper input validation. An authenticated attacker could exploit crafted HTTP requests to execute arbitrary code as r...

CVE-2021-1160

Cisco Small Business RV110W/RV130/RV130W/RV215W routers are vulnerable under CVE-2021-1160 due to improper validation of user-supplied input in the web-based management interface. An authenticated attacker with valid administrator credentials could send crafted HTTP requests to the device, potent...

CVE-2021-1165

CVE-2021-1165 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities stem from improper validation of user-supplied input in the web-based management interface, enabling an authenticated, remote attacker to execute arbitrary code as root or cause a device rest...

CVE-2021-1184

CVE-2021-1184 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue stems from improper validation in the web-based management interface, allowing an authenticated remote attacker to execute arbitrary code as root or trigger a device restart/DoS by sending crafted HTTP reques...

CVE-2021-1154

The CVE-2021-1154 entry covers stored Cross-Site Scripting in Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers’ web management interface. Multiple vulnerabilities stem from insufficient input validation in the authenticated web UI, enabling an authenticated attacker with valid admin...

CVE-2021-1163

CVE-2021-1163 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers via multiple vulnerabilities in the web-based management interface. The issues arise from improper validation of user-supplied input, allowing an authenticated, remote attacker to execute arbitrary code as root o...

CVE-2021-1188

CVE-2021-1188 covers multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The flaw arises from improper validation of user-supplied input in the web UI, allowing an authenticated attacker with valid administrator credent...

CVE-2021-1164

CVE-2021-1164 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerability stems from improper input validation in the web-based management interface, allowing an authenticated remote attacker with valid admin credentials to execute arbitrary code as root or trigger a...

CVE-2021-1155

CVE-2021-1155 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. It is a stored cross-site scripting vulnerability in the web management interface caused by insufficient input validation. An authenticated attacker with administrator credentials could craft HTTP requests to ex...

CVE-2021-1186

Cisco CVE-2021-1186 affects the Cisco Small Business RV110W, RV130, RV130W, and RV215W routers via multiple vulnerabilities in the web-based management interface. The root cause is improper validation of user-supplied input in the web UI, exploitable by an authenticated attacker with valid admini...

CVE-2021-1210

CVE-2021-1210 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from multiple input-validation flaws in the web-based management interface, allowing an authenticated attacker with administrator credentials to execute arbitrary code as root or cause a device r...

CVE-2021-1213

CVE-2021-1213 affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The vulnerabilities reside in the web-based management interface and arise from improper validation of user-supplied input. An authenticated attack could send crafted HTTP requests to an affected device, potentially al...

CVE-2021-1151

CVE-2021-1151 concerns multiple stored XSS vulnerabilities in Cisco Small Business RV110W, RV130, RV130W, and RV215W routers’ web management interface. The flaws stem from insufficient input validation and enable an authenticated, remote attacker with valid administrator credentials to craft HTTP...

CVE-2021-1192

The CVE-2021-1192 entry affects Cisco Small Business RV110W/RV130/RV130W/RV215W routers. The issue is in the web-based management interface where improper input validation enables an authenticated attacker (with valid admin credentials) to send crafted HTTP requests that could execute arbitrary c...

CVE-2021-1189

Cisco Small Business RV110W, RV130, RV130W, and RV215W routers are affected by multiple web-management vulnerabilities caused by improper validation of user input. An authenticated attacker with valid administrator credentials could send crafted HTTP requests over the network to the affected devi...

CVE-2021-1157

CVE-2021-1157 corresponds to stored Cross‑Site Scripting vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue arises from insufficient input validation in the management UI, allowing an authenticated attacker with valid...