Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3323

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device.

Published

2020-07-16T18:15:17.157

Last Modified

2024-11-21T05:30:48.520

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-20
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco rv110w_wireless-n_vpn_firewall_firmware < 1.2.2.8 Yes
Hardware cisco rv110w_wireless-n_vpn_firewall - No
Operating System cisco rv130_vpn_router_firmware < 1.0.3.54 Yes
Hardware cisco rv130_vpn_router - No
Operating System cisco rv130w_wireless-n_multifunction_vpn_router_firmware < 1.0.3.54 Yes
Hardware cisco rv130w_wireless-n_multifunction_vpn_router - No
Operating System cisco rv215w_wireless-n_vpn_router_firmware < 1.3.1.7 Yes
Hardware cisco rv215w_wireless-n_vpn_router - No
References