Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers [1]. The vulnerabilities are due to improper validation of user-supplied input. An authenticated attacker could exploit these by sending crafted HTTP requests to the device's web interface. The affected versions are all firmware releases for these models; Cisco has not released updates.

Exploitation

An attacker must have valid administrator credentials for the device. The web-based management interface is accessible via LAN (cannot be disabled) or via WAN if remote management is enabled (disabled by default). The attacker sends specially crafted HTTP requests to trigger the vulnerability. No user interaction is required beyond the initial authentication.

Impact

Successful exploitation allows the attacker to execute arbitrary code as the root user on the underlying operating system, or cause the device to reload, resulting in a denial of service (DoS) condition. This gives full control over the device.

Mitigation

Cisco has not released software updates that address these vulnerabilities [1]. There are no workarounds. Affected devices are end-of-life? The advisory doesn't explicitly say EOL, but no fix. So we state no fix available. If the device is EOL, we can mention but not in reference. The advisory says "Cisco has not released software updates that address these vulnerabilities. There are no workarounds." So we say that.