cisco-sa-sb-rv-overflow-s2r82P9v: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability
First published: Wed Jun 15 2022(Updated: )
A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Cisco has not released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-overflow-s2r82P9v
Credit: security researcher Puzhuo Liu IIECAS.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Small Business RV110W Wireless-N VPN Firewall | ||
| Cisco Small Business RV130 | ||
| Cisco Small Business RV130W | ||
| Cisco Small Business RV215W |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of cisco-sa-sb-rv-overflow-s2r82P9v?
The severity of cisco-sa-sb-rv-overflow-s2r82P9v is high due to vulnerabilities that allow remote code execution and denial of service.
How do I fix cisco-sa-sb-rv-overflow-s2r82P9v?
To fix cisco-sa-sb-rv-overflow-s2r82P9v, it's recommended to update the affected Cisco Small Business routers to the latest firmware provided by Cisco.
Which devices are affected by cisco-sa-sb-rv-overflow-s2r82P9v?
The affected devices include Cisco Small Business RV110W, RV130, RV130W, and RV215W routers.
What type of attack does cisco-sa-sb-rv-overflow-s2r82P9v enable?
cisco-sa-sb-rv-overflow-s2r82P9v allows unauthenticated remote attackers to execute arbitrary code or cause a device restart, leading to a denial of service.
Is authentication required to exploit cisco-sa-sb-rv-overflow-s2r82P9v?
No, authentication is not required to exploit cisco-sa-sb-rv-overflow-s2r82P9v, making it particularly dangerous.
- agent/author
- agent/type
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/severity
- agent/references
- agent/title
- agent/weakness
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco small business rv110w wireless-n vpn firewall
- canonical/cisco small business rv130
- canonical/cisco small business rv130w
- canonical/cisco small business rv215w