cisco-sa-20191106-sbrv-cmd-x: Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-sbrv-cmd-x
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of Cisco-SA-20191106-SBRV-CMD-X?
The severity of Cisco-SA-20191106-SBRV-CMD-X is classified as high due to the potential for remote command execution with root privileges.
How do I fix Cisco-SA-20191106-SBRV-CMD-X?
To fix Cisco-SA-20191106-SBRV-CMD-X, update your affected Cisco Small Business RV Series Router to the latest software version recommended by Cisco.
What routers are affected by Cisco-SA-20191106-SBRV-CMD-X?
Cisco-SA-20191106-SBRV-CMD-X affects various models including the Cisco Small Business RV016, RV042, RV042G, and RV082 routers.
Can an attacker exploit Cisco-SA-20191106-SBRV-CMD-X without authentication?
No, an attacker must have valid credentials or an active session token to exploit Cisco-SA-20191106-SBRV-CMD-X.
What can be done to mitigate risks associated with Cisco-SA-20191106-SBRV-CMD-X?
To mitigate risks, ensure that your routers use strong, unique passwords and limit remote management access.