Cisco Rv042 Dual Wan Vpn Firmware vulnerabilities

2 known vulnerabilities affecting cisco/rv042_dual_wan_vpn_firmware.

Total CVEs

2

CISA KEV

1

actively exploited

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2019-15271HIGHCVSS 8.8KEVfixed in 4.2.3.102019-11-26

CVE-2019-15271 [HIGH] CWE-502 CVE-2019-15271: A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Rout A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload.

CVE-2019-15990MEDIUMCVSS 5.3fixed in 4.2.3.102019-11-26

CVE-2019-15990 [MEDIUM] CWE-285 CVE-2019-15990: A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Rout A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending craft