CVE-2020-3144

published 2020-07-16

CVE-2020-3144: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN…

Priority P2 68 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. The vulnerability is due to improper session management on affected devices. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
cisco	cisco_rv130w_wireless-n_multifunction_vpn_router_firmware	—	—
cisco	rv110w_firmware	< 1.2.2.8	1.2.2.8
cisco	rv110w_rv130_rv130w_and_rv215w_routers	—	—
cisco	rv130_firmware	< 1.0.3.55	1.0.3.55
cisco	rv130w_firmware	< 1.0.3.55	1.0.3.55
cisco	rv215w_firmware	< 1.3.1.7	1.3.1.7

Detection & IOCs extracted from sources · hover to see the quote

• → Exploit vector is a crafted HTTP request to the web-based management interface of affected Cisco RV-series routers; monitor for unauthenticated HTTP requests that result in administrative access or session establishment without prior credential exchange. ↗
• → Root cause is improper session management; look for anomalous session tokens or session IDs being accepted by the management interface without a corresponding authenticated login event. ↗
• → Successful exploitation grants administrative command execution; alert on unexpected administrative actions (configuration changes, command execution) originating from unauthenticated or newly-established sessions on affected devices (RV110W, RV130, RV130W, RV215W). ↗

• · Vulnerability affects Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router only; scope detection rules to these specific device models. ↗
• · There are no workarounds available; the only mitigation is applying the vendor-released software updates. Ensure patching is prioritized for all affected devices. ↗
• · Tracked under Cisco Bug IDs CSCvr96247, CSCvr96252, and CSCvr96256; use these identifiers when querying Cisco's bug tracker or PSIRT for patch status across the affected product lines. ↗

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

vendor_cisco 9.8 CRITICAL

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284 CWE-287