Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
describes (15)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-20151US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20150US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20149US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20148US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20147US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20146US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20145US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20144US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20143US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20142US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20141US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20140US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20139US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20138US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
| CVE-2023-20137US | medium6.1 | — | ||
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilitiesself
- Cisco Security Vulnerability Policyexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV016 Multi-WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV082 Dual WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV320 and RV325 Dual Gigabit WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV042 and RV042G VPN Router (all models)external
- Cisco Security Advisories pageexternal
remediations (15)
- FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com - FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan