CVE-2014-0683: Critical severity Cisco Rv110w Firmware vulnerability
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2014-0683?
CVE-2014-0683 is considered a high severity vulnerability due to its potential for exploitation allowing unauthorized access.
How do I fix CVE-2014-0683?
To fix CVE-2014-0683, upgrade the affected Cisco devices to the latest firmware version that addresses the vulnerability.
What devices are affected by CVE-2014-0683?
CVE-2014-0683 affects the Cisco RV110W firewall, RV215W router, and CVR100W router with specific firmware versions.
What kind of attack does CVE-2014-0683 allow?
CVE-2014-0683 allows remote attackers to replay modified authentication requests to gain unauthorized access.
Is there a workaround for CVE-2014-0683?
There are no known workarounds for CVE-2014-0683; the recommended solution is to apply the firmware update.