CVE-2021-1173
published 2021-01-13CVE-2021-1173: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated…
PriorityP352high7.2CVSS 3.1
AVNACLPRHUINSUCHIHAH
EPSS
2.19%
80.6th percentile
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | application_extension_platform | — | — |
| cisco | cisco_small_business_rv_series_router_firmware | — | — |
| cisco | rv110w_firmware | — | — |
| cisco | rv110w_firmware | — | — |
| cisco | rv130_vpn_router_firmware | — | — |
| cisco | rv130_vpn_router_firmware | — | — |
| cisco | rv130w_firmware | — | — |
| cisco | rv130w_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | rv215w_wireless-n_vpn_router_firmware | — | — |
| cisco | small_business_rv110w_rv130_rv130w_and_rv215w_routers | — | — |
CVSS provenance
nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
nvdv2.09.0CRITICALAV:N/AC:L/Au:S/C:C/I:C/A:C
cisa9.8CRITICAL
vendor_cisco9.8CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
CISA
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
cisa·2021-11-03·CVSS 9.8
CVE-2021-1871 [CRITICAL] CWE-1173 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Vulnerability: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Affected: Apple iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1871
Remediation Due Date: 2021-11-17
CISA
Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
cisa·2021-11-03·CVSS 9.8
CVE-2021-1870 [CRITICAL] CWE-1173 Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Vulnerability: Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability
Affected: Apple iOS, iPadOS, and macOS
Apple iOS, iPadOS, and macOS WebKit contain an unspecified logic vulnerability that allows a remote attacker to execute code. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2021-1870
Remediation Due Date: 2021-11-17
Cisco
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
vendor_cisco·2021-01-13·CVSS 9.8
CVE-2021-1159 [CRITICAL] CWE-121 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the Universal Plug and Play (UPnP) service and the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow a remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly.
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco has not released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U
Cisco
Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2021-1173 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
CVE-2021-1173: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities
Multiple vulnerabilities in the Universal Plug and Play (UPnP) service and the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow a remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-121, CWE-121
Bug IDs: CSCvv65098, CSCvv69398, CSCvv71463, CSCvv65098, CSCvv69398
GHSA
GHSA-mvwc-vwx4-4x8g: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authen
ghsa_unreviewed·2022-05-24
CVE-2021-1173 [HIGH] CWE-787 GHSA-mvwc-vwx4-4x8g: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authen
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cis
No detection rules found.
No public exploits indexed.
Talos
Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager
blogs_talos·2021-04-20·CVSS 9.0
CVE-2021-26564 [CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager
## Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager
Cisco Talos recently discovered multiple vulnerabilities in Synology DiskStation Manager.
DSM is the Linux-based operating system for every Synology network-attached storage device (NAS). The vulnerabilities exist in various features inside the operating system, including AppArmor and QuickConnect. TALOS-2020-1173 and TALOS-2020-1160 (CVE-2021-26564, CVE-2021-26565 and CVE-2021-26566) are both information disclosure vulnerabilities in DSM. An attacker could exploit both vulnerabilities to steal sensitive login credentials, including those of an administrator.
An attacker could also exploit TALOS-2020-1159 (CVE-2021-26560, CVE-2021-26561 and CVE-2021-26562) with a man-in-the-middle technique to gain the
Talos
Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager
blogs_talos·2021-04-20·CVSS 9.0
CVE-2021-26564 [CRITICAL] Vulnerability Spotlight: Multiple vulnerabilities in Synology DiskStation Manager
Cisco Talos recently discovered multiple vulnerabilities in Synology DiskStation Manager.
DSM is the Linux-based operating system for every Synology network-attached storage device (NAS). The vulnerabilities exist in various features inside the operating system, including AppArmor and QuickConnect. TALOS-2020-1173 and TALOS-2020-1160 (CVE-2021-26564, CVE-2021-26565 and CVE-2021-26566) are both information disclosure vulnerabilities in DSM. An attacker could exploit both vulnerabilities to steal sensitive login credentials, including those of an administrator.
An attacker could also exploit TALOS-2020-1159 (CVE-2021-26560, CVE-2021-26561 and CVE-2021-26562) with a man-in-the-middle technique to gain the ability to remotely execute code as the root user (however within a restricted AppArmo
2021-01-13
Published