CVE-2014-2177 The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote auth...
HighCVSS 9.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCuh87126.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco rv120w firmware | <= 1.0.5.8 | No fix listed |
| cisco rv120w | All versions | No fix listed |
| cisco rv220w firmware | <= 1.0.5.8 | No fix listed |
| cisco rv220w | All versions | No fix listed |
| cisco rv180 firmware | <= 1.0.3.10 | No fix listed |
| cisco rv180 | All versions | No fix listed |
| cisco rv180w | All versions | No fix listed |
References
- packetstormsecurity.com
- 20141106 Cisco RV Series multiple vulnerabilities mailing-list
- 20141105 Multiple Vulnerabilities in Cisco Small Business RV Series Routers patch vendor-advisory
- 20141106 Cisco RV Series multiple vulnerabilities mailing-list
- 1031171 vdb-entry
- cisco-cve20142177-command-exec(98497) vdb-entry