CVE-2023-20025: Input Validation
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.
Other sources
A vulnerability in the web-based management interface of Cisco Small Business RV042 Series Routers could allow an unauthenticated, remote attacker to bypass authentication on the affected device. This vulnerability is due to incorrect user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending crafted requests to the web-based management interface. A successful exploit could allow the attacker to gain root privileges on the affected device.
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the vulnerability ID for this Cisco Small Business RV042 Series Routers vulnerability?
The vulnerability ID for this Cisco Small Business RV042 Series Routers vulnerability is CVE-2023-20025.
What is the severity of CVE-2023-20025?
The severity of CVE-2023-20025 is critical with a score of 9.8.
How does CVE-2023-20025 affect Cisco Rv016 Firmware?
CVE-2023-20025 does not affect Cisco Rv016 Firmware.
How does CVE-2023-20025 affect Cisco Rv042 Firmware?
CVE-2023-20025 affects Cisco Rv042 Firmware.
Is there a fix available for CVE-2023-20025?
Yes, Cisco has provided a fix for CVE-2023-20025. Please refer to the Cisco Security Advisory for more information.