CVE-2019-15271highunder attackCWE-502

CVE-2019-15271: high-severity vulnerability in Cisco Small Business RV Series Router Firmware

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

Published · Updated

Follow this CVE+ Monitor Cisco Small Business RV Series Router+ Monitor RV Series Routers

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

51Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 8.8epss 5.5%
from disclosure to weapon
Published on NVDNov 26
CISA KEV+925d
Action required by CISAfederal deadline: 2022-06-22

Apply updates per vendor instructions.

In short

A flaw in Cisco Small Business routers' web interface allows an authenticated user to run commands as root by sending specially crafted requests, because the system doesn't properly check what data is being sent.

Technical detail

The vulnerability stems from insufficient input validation in the web-based management interface (CWE-502 deserialization of untrusted data). An authenticated remote attacker can exploit this by crafting malicious HTTP payloads to execute arbitrary commands with root privileges; exploitation requires valid credentials or an active session token.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Cisco · Cisco Small Business RV Series Router Firmware
Related CVEs — Cisco Small Business RV Series Router Firmware

In the same product, most dangerous first.

CVE-2019-1653HIGHCisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityEPSS 99.9%KEVCVE-2019-1652HIGHCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityEPSS 95.9%KEVCVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2023-20118MEDIUMCVE-2023-20118EPSS 54.1%KEVCVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEV