CVE-2014-0683
First published: Thu Mar 06 2014(Updated: )
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RV110W Wireless-N VPN Firewall Firmware | <=1.2.0.9 | |
| Cisco RV110W firmware | ||
| Cisco RV215W Firmware | <=1.1.0.5 | |
| Cisco RV215W Firmware | ||
| Cisco CVR100W Firmware | <=1.0.1.19 | |
| Cisco CVR100W firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0683?
CVE-2014-0683 is considered a high severity vulnerability due to its potential for exploitation allowing unauthorized access.
How do I fix CVE-2014-0683?
To fix CVE-2014-0683, upgrade the affected Cisco devices to the latest firmware version that addresses the vulnerability.
What devices are affected by CVE-2014-0683?
CVE-2014-0683 affects the Cisco RV110W firewall, RV215W router, and CVR100W router with specific firmware versions.
What kind of attack does CVE-2014-0683 allow?
CVE-2014-0683 allows remote attackers to replay modified authentication requests to gain unauthorized access.
Is there a workaround for CVE-2014-0683?
There are no known workarounds for CVE-2014-0683; the recommended solution is to apply the firmware update.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco rv110w wireless-n vpn firewall firmware
- version/cisco rv110w wireless-n vpn firewall firmware/1.2.0.9
- canonical/cisco rv110w firmware
- canonical/cisco rv215w firmware
- version/cisco rv215w firmware/1.1.0.5
- canonical/cisco cvr100w firmware
- version/cisco cvr100w firmware/1.0.1.19