Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Stored Cross-Site Scripting Vulnerabilities

Vulnerability

The web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers (all firmware versions) contains multiple stored cross-site scripting vulnerabilities due to insufficient input validation [1]. The interface is accessible via local LAN connection or over the WAN if remote management is enabled (disabled by default) [1].

Exploitation

An authenticated remote attacker with valid administrator credentials can exploit these vulnerabilities by sending crafted HTTP requests to the management interface [1]. No user interaction is required beyond the victim administrator accessing the malicious request.

Impact

Successful exploitation allows the attacker to execute arbitrary script code in the context of the affected interface, potentially leading to access of sensitive browser-based information such as session tokens or other data [1].

Mitigation

No workarounds are available for these vulnerabilities [1]. The Cisco Security Advisory does not specify a fixed firmware version; however, users are advised to monitor for firmware updates and apply them when available. Restricting access to the management interface and using strong administrator passwords can reduce the risk of exploitation.