CVE-2020-3268: Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities
First published: Thu Jun 18 2020(Updated: )
Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RV110W Firmware | <=1.2.2.5 | |
| Cisco RV110W firmware | ||
| Cisco RV130 VPN Router Firmware | <=1.0.3.54 | |
| Cisco RV130W Wireless-AC VPN Router | ||
| Cisco RV130W Firmware | <=1.0.3.54 | |
| Cisco RV130W firmware | ||
| Cisco RV215W Firmware | <=1.3.1.5 | |
| Cisco RV215W Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-3268?
CVE-2020-3268 is rated as high severity due to its potential for remote command execution by authenticated attackers.
How do I fix CVE-2020-3268?
To mitigate CVE-2020-3268, upgrade the firmware of affected Cisco RV110W, RV130, RV130W, and RV215W series routers to a version that addresses the vulnerabilities.
What devices are affected by CVE-2020-3268?
CVE-2020-3268 affects Cisco RV110W, RV130, RV130W, and RV215W Series Routers running specific firmware versions.
What type of attack can be executed using CVE-2020-3268?
CVE-2020-3268 allows authenticated remote attackers to execute arbitrary commands on the affected router's management interface.
Who can exploit CVE-2020-3268?
Only authenticated users with administrative privileges can exploit CVE-2020-3268 to execute arbitrary commands.
- agent/type
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/title
- agent/description
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco rv110w firmware
- version/cisco rv110w firmware/1.2.2.5
- canonical/cisco rv130 vpn router firmware
- version/cisco rv130 vpn router firmware/1.0.3.54
- canonical/cisco rv130w wireless-ac vpn router
- canonical/cisco rv130w firmware
- version/cisco rv130w firmware/1.0.3.54
- canonical/cisco rv215w firmware
- version/cisco rv215w firmware/1.3.1.5