Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

The web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers contains multiple vulnerabilities due to insufficient validation of user fields within incoming HTTP packets [1]. These vulnerabilities are present in all firmware versions prior to any fix. The affected routers include RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router [1]. The web-based management interface is accessible via LAN connection by default, and optionally via WAN if remote management is enabled (disabled by default) [1].

Exploitation

An attacker must have valid Administrator credentials on the affected device [1]. The attacker can then send a crafted HTTP request to the web-based management interface over LAN or WAN (if remote management is enabled) [1]. No additional user interaction is required; the attacker can directly trigger the vulnerability by sending the malicious request [1].

Impact

Successful exploitation allows the attacker to execute arbitrary commands on the device with root-level privileges, or to cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition [1]. This gives the attacker full control over the device or disrupts its availability [1].

Mitigation

As of the publication date (July 21, 2022), Cisco has not released software updates that address these vulnerabilities [1]. There are no workarounds available [1]. Since these are end-of-life products, no fix is expected [1]. Affected users should consider upgrading to a supported product [1].