Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cross-Site Scripting Vulnerability
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-20362US | — | — | ||
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker… | ||||
references
External citations — patches, advisories, analysis.
- Security Vulnerability Policyexternal
- Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Cross-Site Scripting Vulnerabilityself
- Cisco Security Vulnerability Policyexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV016 Multi-WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV082 Dual WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV320 and RV325 Dual Gigabit WAN VPN Routerexternal
- End-of-Sale and End-of-Life Announcement for the Cisco RV042 and RV042G VPN Router (all models)external
- Cisco Security Advisories pageexternal
remediations (1)
- FixedCisco Small Business RV Series Router Firmware
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan