CVE-2019-1897: A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect…

PriorityP335medium5.3CVSS 3.1

AVNACLPRNUINSUCNINAL

EPSS

4.48%

90.3th percentile

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_rv130w_wireless-n_multifunction_vpn_router_firmware	>= unspecified < 1.0.3.51	1.0.3.51
cisco	rv110w_rv130w_and_rv215w_routers	—	—

CVSS provenance

nvdv3.15.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

nvdv3.05.3MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

vendor_cisco5.3MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.