Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

An authenticated attacker with admin access to Cisco RV320/RV325 routers can inject malicious commands through the web management interface, gaining complete control of the device. This matters because these routers protect entire networks, so compromising one exposes all connected systems.

Command injection vulnerability in the web-based management interface of Cisco RV320/RV325 routers exploitable via malicious HTTP POST requests by authenticated administrative users. The vulnerability stems from improper input validation, allowing arbitrary command execution as root on the underlying Linux system. Attack requires prior authentication with admin privileges but results in complete device compromise.