Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Vulnerability

Multiple stored cross-site scripting (XSS) vulnerabilities exist in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The vulnerabilities are due to insufficient input validation by the interface. The management interface is accessible via a local LAN connection (which cannot be disabled) or through the WAN connection if the remote management feature is enabled (disabled by default). [1]

Exploitation

An attacker must have valid administrator credentials on the affected device. The attacker sends crafted HTTP requests to the device, which are stored and later executed when an administrator views the affected page. The attacker must be able to reach the management interface, either through the LAN or through the WAN if remote management is enabled. No additional user interaction is required beyond the administrator's normal session. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary script code in the context of the affected interface. This could lead to access of sensitive browser-based information (such as session tokens or cookies) or allow the attacker to perform actions as the authenticated administrator. [1]

Mitigation

Cisco has not released firmware updates to address these vulnerabilities. The advisory states that there are no workarounds that fully mitigate the issue. As a best practice, administrators should disable remote management if it is not required, but this does not eliminate the risk from LAN-based attacks. [1]