Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability

Vulnerability

The vulnerability resides in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router. The issue is due to improper session management, which allows an unauthenticated attacker to bypass authentication. Affected firmware versions are those prior to the fixed releases.

Exploitation

An attacker can exploit this vulnerability by sending a crafted HTTP request to the affected device's web management interface. No authentication is required, and the attacker can be remotely positioned on the network without any prior access. The crafted request manipulates session handling to bypass authentication checks.

Impact

Successful exploitation allows the attacker to gain administrative access on the device. This means the attacker can execute arbitrary commands with administrative privileges, leading to full compromise of the device. The confidentiality, integrity, and availability of the system are all affected, as the attacker can read, modify, or disrupt device configuration and operations.

Mitigation

Cisco has released free software updates to address this vulnerability. Affected customers should upgrade to the fixed versions as specified in the Cisco security advisory [1]. No public workarounds are available. Cisco has not listed this CVE in the Known Exploited Vulnerabilities (KEV) catalog at the time of publication [1].