1. CVE-Search
  2. CVE-2019-1663
ID CVE-2019-1663
Summary A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.
References
Vulnerable Configurations
  • cpe:2.3:o:cisco:rv110w_firmware:1.1.0.9:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv110w_firmware:1.1.0.9:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv110w_firmware:1.2.0.10:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv110w_firmware:1.2.0.10:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv110w_firmware:1.2.1.4:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv110w_firmware:1.2.1.4:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv110w_firmware:1.2.1.7:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv110w_firmware:1.2.1.7:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv130w_firmware:1.0.0.21:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv130w_firmware:1.0.0.21:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv130w_firmware:1.0.1.3:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv130w_firmware:1.0.1.3:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv130w_firmware:1.0.2.7:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv130w_firmware:1.0.2.7:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv215w_firmware:1.1.0.6:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv215w_firmware:1.1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv215w_firmware:1.2.0.14:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv215w_firmware:1.2.0.14:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv215w_firmware:1.2.0.15:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv215w_firmware:1.2.0.15:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv215w_firmware:1.3.0.7:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv215w_firmware:1.3.0.7:*:*:*:*:*:*:*
  • cpe:2.3:o:cisco:rv215w_firmware:1.3.0.8:*:*:*:*:*:*:*
    cpe:2.3:o:cisco:rv215w_firmware:1.3.0.8:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 05-10-2020 - 20:27)
Impact:
Exploitability:
CWE CWE-787
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 107185
cisco 20190227 Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
exploit-db 46705
misc
Last major update 05-10-2020 - 20:27
Published 28-02-2019 - 18:29
Last modified 05-10-2020 - 20:27
Back to Top