Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities

Vulnerability

Multiple stack overflow vulnerabilities exist in the web-based management interface of Cisco Small Business RV320, RV325, RV016, RV042, and RV082 routers [1]. The vulnerabilities are due to insufficient boundary restrictions on user-supplied input to scripts. An authenticated remote attacker with administrative privileges can exploit these vulnerabilities by sending crafted requests containing overly large values, leading to a stack overflow.

Exploitation

To exploit, an attacker must have valid administrative credentials to log in to the web-based management interface. The attacker then sends specially crafted HTTP requests with excessively large values to the affected device, triggering a stack overflow in a vulnerable script [1].

Impact

Successful exploitation could cause the device to crash or allow the attacker to execute arbitrary code with root privileges on the underlying operating system. This gives the attacker full control over the affected router.

Mitigation

Cisco has released free software updates to address these vulnerabilities [1]. Customers should upgrade to the fixed firmware version as indicated in the Cisco Security Advisory. No workarounds were provided. For details, refer to the advisory [1].