Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities

Vulnerability

The stored cross-site scripting (XSS) vulnerability resides in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers. The flaw stems from insufficient input validation of HTTP requests. Attackers can inject arbitrary script code that persists within the interface. Affected firmware versions have not been patched by Cisco [1].

Exploitation

An unauthenticated, remote attacker sends crafted HTTP requests to the vulnerable device and then persuades an authenticated administrator to visit specific web pages that contain the malicious payload. No privileged access or user interaction beyond the administrator's normal browsing is required for the initial injection [1].

Impact

Successful exploitation allows arbitrary script execution in the context of the affected web interface. This can lead to disclosure of sensitive browser-based information (e.g., session tokens, cookies) and potential compromise of administrative functions [1].

Mitigation

Cisco has not released software updates addressing these vulnerabilities. Mitigation steps include disabling remote management on all affected models, and additionally blocking access to ports 443 and 60443 on RV016, RV042, RV042G, and RV082 routers. For detailed configuration steps, refer to the advisory [1]. No workaround is available beyond these mitigations.