Non notée
CVE-2018-0424 A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W…
Description
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input to scripts by the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the root user.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco RV130W Wireless-N Multifunction VPN Router Firmware | Versions non publiées |
Références
- 1041677 www.securitytracker.com
- 20180905 Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability tools.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco RV130W Wireless-N Multifunction VPN Router Firmware
Les 14 CVE de Cisco RV130W Wireless-N Multifunction VPN Router Firmware →
CVE-2020-3332
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series…
8.1
Élevée
CVE-2020-3146
Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN…
8.8
Élevée
CVE-2020-3145
Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN…
8.8
Élevée
CVE-2020-3144
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router,…
9.8
Critique