Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

The vulnerability resides in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. It is due to improper validation of user-supplied input. An authenticated attacker with administrator credentials can exploit this by sending crafted HTTP requests. The affected devices include all firmware versions prior to any fix; Cisco has not released software updates. The web-based management interface is accessible via LAN or WAN if remote management is enabled [1].

Exploitation

An attacker must have valid administrator credentials for the device. They can send specially crafted HTTP requests to the web-based management interface. If remote management is enabled, the attack can be launched from the WAN side; otherwise, it requires LAN access. No user interaction is needed beyond the initial authentication [1].

Impact

Successful exploitation allows the attacker to execute arbitrary code with root privileges on the underlying operating system, leading to full compromise of the device. Alternatively, the attacker can cause the device to reload, resulting in a denial of service condition [1].

Mitigation

Cisco has not released software updates to address these vulnerabilities. There are no workarounds. Users should consider upgrading to a supported model if possible, as these devices may be end-of-life [1].