Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

This vulnerability resides in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. The issue stems from improper validation of user-supplied input, allowing an authenticated attacker to trigger a buffer overflow or similar condition. Affected firmware versions are those prior to any fix; however, Cisco has not released updates. [1]

Exploitation

An attacker must have valid administrator credentials for the device. The attacker can then send crafted HTTP requests to the web-based management interface. No additional user interaction is required. The attack can be launched from the local LAN or, if remote management is enabled, from the WAN side. [1]

Impact

Successful exploitation allows the attacker to execute arbitrary code with root privileges on the underlying operating system, or cause the device to reload, resulting in a denial of service condition. [1]

Mitigation

Cisco has not released software updates that address this vulnerability. There are no workarounds. Users may consider disabling remote management if enabled, but this does not prevent exploitation from the LAN. The devices are not listed as end-of-life in the advisory, but no fix is available. [1]