Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

The vulnerabilities reside in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. They stem from insufficient validation of user-supplied fields within incoming HTTP packets. An attacker can exploit this by sending a crafted request to the management interface. The interface is accessible over LAN by default, and over WAN if the remote management feature is enabled. All firmware versions of these models are affected [1].

Exploitation

To exploit, an attacker must have valid Administrator credentials for the target device. With those credentials, the attacker sends a specially crafted HTTP request to the web-based management interface. No additional user interaction is required. The attack can be launched remotely if remote management is enabled; otherwise, it requires LAN access [1].

Impact

Successful exploitation allows the attacker to execute arbitrary commands on the device with root-level privileges, leading to full compromise. Alternatively, the attacker can cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition [1].

Mitigation

Cisco has not released software updates to address these vulnerabilities, and there are no workarounds available. The affected routers are end-of-life, and no patches are planned. Users should consider replacing the devices or, if remote management is enabled, disable it to reduce exposure [1].