Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-3331

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input data by the web-based management interface. An attacker could exploit this vulnerability by sending crafted requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user.

Published

2020-07-16T18:15:17.377

Last Modified

2024-11-21T05:30:49.053

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

CVSSv2 Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

10.0

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-119
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco rv110w_wireless-n_vpn_firewall_firmware < 1.2.2.8 Yes
Hardware cisco rv110w_wireless-n_vpn_firewall - No
Operating System cisco rv215w_wireless-n_vpn_router_firmware < 1.3.1.7 Yes
Hardware cisco rv215w_wireless-n_vpn_router - No
References