8.8 Élevée Exploitée

CVE-2019-15271 Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Exploitation active constatée

· catalogue CISA KEV

Action attendue Apply updates per vendor instructions.

Campagnes de rançongiciel Non constatée à ce jour

Faiblesse CWE-502

Description

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco Small Business RV Series Router Firmware	Versions non publiées

Références

20191106 Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability tools.cisco.com

Chronologie

Publiée 26 novembre 2019
Ajoutée au catalogue KEV 8 juin 2022
Dernière modification 21 octobre 2025

Les 262 CVE de Cisco Small Business RV Series Router Firmware →

CVE-2020-3431 A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and… 6.1 Moyenne CVE-2024-20524 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Moyenne CVE-2024-20523 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.8 Moyenne CVE-2024-20522 A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers… 6.5 Moyenne

Suivre cette CVE