SB2018090607 - Multiple vulnerabilities in Cisco RV110W, RV130W, and RV215W routers 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2018090607

SB2018090607 - Multiple vulnerabilities in Cisco RV110W, RV130W, and RV215W routers

Published: September 6, 2018

Security Bulletin ID SB2018090607
Severity
High
Patch available
YES
Number of vulnerabilities 4
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 25% Low 75%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 4 secuirty vulnerabilities.


1) Improper access control (CVE-ID: CVE-2018-0425)

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router due to improper access control. A remote attacker can send malicious requests and gain access to sensitive configuration information, including user authentication credentials.


2) Path traversal (CVE-ID: CVE-2018-0426)

The vulnerability allows a remote attacker to obtain potentially sensitive information.

The vulnerability exists in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router due to improper validation of directory traversal character sequences. A remote attacker can send malicious requests to the targeted device, conduct path traversal attack and gain access to arbitrary files on the affected device.


3) Command injection (CVE-ID: CVE-2018-0424)

The vulnerability allows a remote authenticated attacker to execute arbitrary commands.

The vulnerability exists in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router due to improper validation of user-supplied input to scripts. A remote attacker can send malicious requests to inject and execute arbitrary commands with the privileges of the root user.


4) Buffer overflow (CVE-ID: CVE-2018-0423)

The vulnerability allows a remote attacker to cause DoS condition or execute arbitrary code.

The vulnerability exists in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router due to boundary error when handling user-supplied input in the Guest user feature. A remote attacker can send malicious requests to a targeted device, trigger a buffer overflow condition and cause the device to stop responding or execute arbitrary code with elevated privileges.


Remediation

Install update from vendor's website.

References