Cisco Rv130W Wireless-N Multifunction Vpn Router Firmware vulnerabilities

CVE-2020-3144 [CRITICAL] CWE-284 CVE-2020-3144: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, R A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. T

CVE-2020-3332 [HIGH] CWE-78 CVE-2020-3332: A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit

CVE-2020-3145 [HIGH] CWE-119 CVE-2020-3145: Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Fi Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of use

CVE-2020-3146 [HIGH] CWE-119 CVE-2020-3146: Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Fi Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of use

CVE-2020-3269 [HIGH] CWE-119 CVE-2020-3269: Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and R Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2020-3268 [HIGH] CWE-119 CVE-2020-3268: Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and R Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2019-1843 [HIGH] CWE-20 CVE-2019-1843: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to

CVE-2019-1897 [MEDIUM] CWE-285 CVE-2019-1897: A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers co A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by acc

CVE-2019-1898 [MEDIUM] CWE-285 CVE-2019-1898: A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers co A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file.

CVE-2019-1899 [MEDIUM] CWE-285 CVE-2019-1899: A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unau A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing a specific URI on the w

CVE-2018-0426 [CRITICAL] CWE-22 CVE-2018-0426: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal char

CVE-2018-0425 [CRITICAL] CWE-200 CVE-2018-0425: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper access control to files within the we

CVE-2018-0423 [HIGH] CWE-119 CVE-2018-0423: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial of service condition or to execute arbitrary code. The vulnerability is due to improper boundary rest

CVE-2018-0424 [HIGH] CWE-77 CVE-2018-0424: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input to scripts by the we