Skip to content
fr Sign in
6.1 Medium

CVE-2024-20362 A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and…

Description

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

Affected products and versions

Product Affected versions Fixed in
Cisco Small Business RV Series Router Firmware 4.2 4.2.2.08 → 4.2.3.14 No fix stated
Cisco Small Business RV Series Router Firmware 4.1.1.01 No fix stated
Cisco Small Business RV Series Router Firmware 4.0 4.0.0.7 → 4.0.4.02-tm No fix stated
Cisco Small Business RV Series Router Firmware 3.0.0.1-tm No fix stated
Cisco Small Business RV Series Router Firmware 2.0.0.19-tm No fix stated
Cisco Small Business RV Series Router Firmware 1.5.1.05 No fix stated
Cisco Small Business RV Series Router Firmware 1.4 1.4.2.15 → 1.4.2.22 No fix stated
Cisco Small Business RV Series Router Firmware 1.3 1.3.1.10 → 1.3.13.02-tm No fix stated
Cisco Small Business RV Series Router Firmware 1.2.1.14 No fix stated
Show the other branch
Product Affected versions Fixed in
Cisco Small Business RV Series Router Firmware 1.1 1.1.0.09 → 1.1.1.19 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Cisco Small Business RV Series Router Firmware

The 262 CVEs of Cisco Small Business RV Series Router Firmware →
CVE-2020-3431 A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and… 6.1 Medium CVE-2024-20524 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Medium CVE-2024-20523 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Medium CVE-2024-20522 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.5 Medium
Track this CVE