CVE-2018-0405: Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability
A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to conduct a directory path traversal attack on a targeted device. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0405?
CVE-2018-0405 has a high severity rating due to the potential for unauthenticated remote attackers to exploit the vulnerability.
What devices are affected by CVE-2018-0405?
CVE-2018-0405 affects the Cisco RV180W Wireless-N Multifunction VPN Router and RV220W Wireless Network Security Firewall.
How do I fix CVE-2018-0405?
To fix CVE-2018-0405, ensure that the firmware for the affected Cisco RV180W and RV220W devices is updated to a version that mitigates this vulnerability.
Can CVE-2018-0405 be exploited remotely?
Yes, CVE-2018-0405 can be exploited by unauthenticated remote attackers without physical access to the devices.
What type of attack can CVE-2018-0405 facilitate?
CVE-2018-0405 can facilitate a directory path traversal attack, allowing attackers to access restricted directories on the device.