Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Vulnerability

Multiple stored cross-site scripting (XSS) vulnerabilities exist in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities are due to insufficient input validation of user-supplied data. Affected firmware versions are those running on these devices prior to the fixed releases. The interface is accessible via LAN or WAN if remote management is enabled (disabled by default). [1]

Exploitation

An attacker must have valid administrator credentials for the affected device. The attacker can send crafted HTTP requests containing malicious script code to the web management interface. No user interaction is required beyond the administrator performing actions that trigger the stored XSS. The attack is remote, but requires network access to the device's management interface. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary script code in the context of the affected interface, potentially leading to disclosure of sensitive browser-based information (e.g., session tokens) or further compromise of the device's management functions. The attacker gains the ability to perform actions as the victim administrator within the web interface. [1]

Mitigation

Cisco has released firmware updates to address these vulnerabilities. Users should upgrade to the latest firmware versions for their respective devices. There are no workarounds. The advisory provides details on fixed versions. [1]