Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (all software releases) allows an authenticated, Administrator-level remote attacker to cause an unexpected reload of the affected device, resulting in a denial of service (DoS) condition. The issue is due to improper validation of user input in incoming HTTP packets [1].

Exploitation

An attacker must have valid Administrator credentials on the target device. The attacker sends a crafted HTTP request to the web-based management interface of the affected router. No other user interaction or special network position is required beyond network access to the management interface [1].

Impact

Successful exploitation causes the device to unexpectedly reload, resulting in a denial of service condition. The device becomes temporarily unavailable for legitimate users and management functions until it completes the reboot process. There is no code execution or data disclosure associated with this specific vulnerability [1].

Mitigation

Cisco has not and will not release software updates to address this vulnerability because the affected products are past their respective dates for End of Software Maintenance Releases. No workarounds are available. The recommended mitigation is to replace affected routers with a product that is still supported [1].