8.1 Élevée

CVE-2020-3332 A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series…

Description

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary shell commands or scripts with root privileges on the affected device.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Cisco RV130W Wireless-N Multifunction VPN Router Firmware	Versions non publiées

Références

20200715 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability tools.cisco.com

Chronologie

Publiée 16 juillet 2020
Dernière modification 15 novembre 2024

Les 14 CVE de Cisco RV130W Wireless-N Multifunction VPN Router Firmware →

CVE-2020-3146 Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN… 8.8 Élevée CVE-2020-3145 Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN… 8.8 Élevée CVE-2020-3144 A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router,… 9.8 Critique CVE-2020-3269 Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers… 7.2 Élevée

Suivre cette CVE