rv215w_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rv215w_firmware/ Sun, 26 Feb 2023 06:31:56 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png rv215w_firmware Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/rv215w_firmware/ 32 32 CVE-2019-1899 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1899/ Sun, 26 Feb 2023 06:31:56 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1899/ A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing a specific URI on […]

The post CVE-2019-1899 appeared first on CVE Vulnerability.

]]> A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing a specific URI on the web interface of the router.

The post CVE-2019-1899 appeared first on CVE Vulnerability.

]]> CVE-2019-1898 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1898/ Sun, 26 Feb 2023 06:31:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1898/ A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A […]

The post CVE-2019-1898 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the attacker to access the information contained in the file.

The post CVE-2019-1898 appeared first on CVE Vulnerability.

]]> CVE-2019-1897 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1897/ Sun, 26 Feb 2023 06:31:55 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1897/ A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL […]

The post CVE-2019-1897 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.

The post CVE-2019-1897 appeared first on CVE Vulnerability.

]]> CVE-2019-1843 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1843/ Sun, 26 Feb 2023 06:31:46 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1843/ A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation […]

The post CVE-2019-1843 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to reload the device and causing a DoS condition.

The post CVE-2019-1843 appeared first on CVE Vulnerability.

]]> CVE-2019-1663 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-1663/ Sun, 26 Feb 2023 06:31:18 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-1663/ A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. […]

The post CVE-2019-1663 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.

The post CVE-2019-1663 appeared first on CVE Vulnerability.

]]> CVE-2021-1459 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-1459/ Thu, 23 Feb 2023 14:06:28 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-1459/ A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted […]

The post CVE-2021-1459 appeared first on CVE Vulnerability.

]]> A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device. Cisco has not released software updates that address this vulnerability.

The post CVE-2021-1459 appeared first on CVE Vulnerability.

]]> CVE-2022-20923 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20923/ Thu, 23 Feb 2023 05:02:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20923/ A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by […]

The post CVE-2022-20923 appeared first on CVE Vulnerability.

]]> A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass authentication controls and access the IPSec VPN network. This vulnerability is due to the improper implementation of the password validation algorithm. An attacker could exploit this vulnerability by logging in to the VPN from an affected device with crafted credentials. A successful exploit could allow the attacker to bypass authentication and access the IPSec VPN network. The attacker may obtain privileges that are the same level as an administrative user, depending on the crafted credentials that are used. Cisco has not released software updates that address this vulnerability.

The post CVE-2022-20923 appeared first on CVE Vulnerability.

]]> CVE-2022-20910 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20910/ Thu, 23 Feb 2023 05:02:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20910/ Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user […]

The post CVE-2022-20910 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly, resulting in a DoS condition. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

The post CVE-2022-20910 appeared first on CVE Vulnerability.

]]> CVE-2022-20891 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20891/ Thu, 23 Feb 2023 05:02:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20891/ Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user […]

The post CVE-2022-20891 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly, resulting in a DoS condition. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

The post CVE-2022-20891 appeared first on CVE Vulnerability.

]]> CVE-2022-20890 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-20890/ Thu, 23 Feb 2023 05:02:27 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-20890/ Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user […]

The post CVE-2022-20890 appeared first on CVE Vulnerability.

]]> Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient validation of user fields within incoming HTTP packets. An attacker could exploit these vulnerabilities by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device with root-level privileges or to cause the device to restart unexpectedly, resulting in a DoS condition. To exploit these vulnerabilities, an attacker would need to have valid Administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.

The post CVE-2022-20890 appeared first on CVE Vulnerability.

]]>