Cisco Rv130W Firmware vulnerabilities

CVE-2021-1182 [HIGH] CWE-121 CVE-2021-1182: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management

CVE-2021-1173 [HIGH] CWE-121 CVE-2021-1173: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management

CVE-2021-1166 [HIGH] CWE-121 CVE-2021-1166: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management

CVE-2021-1157 [MEDIUM] CWE-79 CVE-2021-1157: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1158 [MEDIUM] CWE-79 CVE-2021-1158: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1151 [MEDIUM] CWE-79 CVE-2021-1151: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1152 [MEDIUM] CWE-79 CVE-2021-1152: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1153 [MEDIUM] CWE-79 CVE-2021-1153: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1154 [MEDIUM] CWE-79 CVE-2021-1154: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1155 [MEDIUM] CWE-79 CVE-2021-1155: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2021-1156 [MEDIUM] CWE-79 CVE-2021-1156: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130 Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface.

CVE-2020-3144 [CRITICAL] CWE-284 CVE-2020-3144: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, R A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. T

CVE-2020-3145 [HIGH] CWE-119 CVE-2020-3145: Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Fi Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of use

CVE-2020-3146 [HIGH] CWE-119 CVE-2020-3146: Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Fi Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of use

CVE-2020-3269 [HIGH] CWE-119 CVE-2020-3269: Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and R Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2020-3268 [HIGH] CWE-119 CVE-2020-3268: Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and R Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.

CVE-2019-1843 [HIGH] CWE-20 CVE-2019-1843: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to

CVE-2019-1663 [CRITICAL] CWE-119 CVE-2019-1663: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied d

CVE-2018-0425 [CRITICAL] CWE-200 CVE-2018-0425: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper access control to files within the we

CVE-2018-0426 [CRITICAL] CWE-22 CVE-2018-0426: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, C A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal char