cisco-sa-sb-rv-rce-overflow-ygHByAK

csafUScisco_csaf

Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

view advisory published 2022-07-20

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly, resulting in a DoS condition. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

01

describes (35)

Related CVEs.

IDseverity exploitable
CVE-2022-20912UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20911UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20910UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20904UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20903UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20902UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20901UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20900UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20899UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20898UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20897UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20896UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20895UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20894UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20893UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20892UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20891UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20890UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20889UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
CVE-2022-20888UShigh7.2—
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to ex…
showing 20 of 35
02

references

External citations — patches, advisories, analysis.

03

remediations (35)

  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
  • FixedCisco Small Business RV Series Router Firmware

    Cisco has released software updates that address this vulnerability.

    https://software.cisco.com
scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan