Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers allow an authenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS). The issues stem from insufficient validation of user fields within incoming HTTP packets. Affected devices include all firmware versions prior to any fix; Cisco has not released software updates. The web-based management interface is accessible via LAN or WAN if remote management is enabled [1].

Exploitation

An attacker must have valid Administrator credentials on the target device. The attacker sends a crafted HTTP request to the web-based management interface, exploiting the insufficient validation to trigger either arbitrary command execution or a device restart. The attack can be launched from the LAN or, if remote management is enabled, from the WAN [1].

Impact

Successful exploitation allows the attacker to execute arbitrary commands with root-level privileges, leading to full compromise of the device, or to cause the device to restart unexpectedly, resulting in a denial of service condition [1].

Mitigation

Cisco has not released software updates to address these vulnerabilities. No workarounds are available. Users should consider disabling remote management if not required and restrict access to the management interface to trusted networks [1].