Vulnslist

Cisco vulnerabilities by product, model, software, and advisory.

Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities

cisco-sa-rv160-260-rce-XZeFkNHf · Critical · Published · Updated

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.  These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf

Cisco advisory · CSAF JSON

Workarounds

There are no workarounds that address these vulnerabilities.

CVEsCVE-2021-1289, CVE-2021-1290, CVE-2021-1291, CVE-2021-1292, CVE-2021-1293, CVE-2021-1294, CVE-2021-1295
Cisco Bug IDsCSCvw13908, CSCvw13917, CSCvw19718, CSCvw19849, CSCvw27982, CSCvw27923, CSCvw50568
CVSS ScoreBase 9.8
Base 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Base 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X
Product Names From Source
Cisco Small Business RV Series Router Firmware

Related Products

Product CVE Evidence
Cisco Small Business RV Series Router Firmware CVE-2021-1295 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1294 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1293 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1292 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1291 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1290 Cisco OpenVuln
Cisco Small Business RV Series Router Firmware CVE-2021-1289 Cisco OpenVuln