Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities

Vulnerability

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. These vulnerabilities are due to insufficient validation of user-supplied fields within incoming HTTP packets. An authenticated attacker can exploit these issues by sending a specially crafted HTTP request to the management interface. No firmware updates have been released to address these vulnerabilities [1].

Exploitation

To exploit these vulnerabilities, an attacker must have valid Administrator credentials for the affected device. The web-based management interface is accessible over a LAN connection and, if enabled, over a WAN connection via the remote management feature (disabled by default). The attacker sends a crafted HTTP request to the interface; no additional user interaction is required [1].

Impact

Successful exploitation allows an attacker to execute arbitrary commands on the device with root-level privileges, leading to full compromise. Alternatively, the attacker can cause the device to restart unexpectedly, resulting in a denial of service (DoS) condition [1].

Mitigation

Cisco has not released software updates to fix these vulnerabilities, and no workarounds are available. Users may consider disabling remote management if enabled, but this does not mitigate attacks from the LAN side. The affected devices are end-of-life, and no patches are planned [1].