8.8 High Exploited

CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Active exploitation observed

· CISA KEV catalogue

Required action Apply updates per vendor instructions.

Ransomware campaigns Not observed so far

Weakness CWE-502

Description

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.

Affected products and versions

Product	Affected versions	Fixed in
Cisco Small Business RV Series Router Firmware	Versions not published

References

20191106 Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability tools.cisco.com

Timeline

Published November 26, 2019
Added to the KEV catalogue June 8, 2022
Last modified October 21, 2025

The 262 CVEs of Cisco Small Business RV Series Router Firmware →

CVE-2020-3431 A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and… 6.1 Medium CVE-2024-20524 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Medium CVE-2024-20523 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Medium CVE-2024-20522 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.5 Medium

Track this CVE