CVE-2023-20118mediumunder attackCWE-77

CVE-2023-20118: medium-severity vulnerability in Cisco Small Business RV Series Router Firmware

Published · Updated

Follow this CVE+ Monitor Cisco Small Business RV Series Router+ Monitor Small Business RV Series Routers

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

55Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Actcvss 6.5epss 54%
from disclosure to weapon
Published on NVDApr 5
CISA KEV+698d
Action required by CISAfederal deadline: 2025-03-24

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A flaw in Cisco Small Business Routers allows an authenticated administrator to run arbitrary commands through the web interface due to poor input validation. An attacker with admin credentials could gain full control of the router.

Technical detail

Improper HTTP input validation in the web-based management interface of Cisco RV016, RV042, RV042G, RV082, RV320, and RV325 routers enables authenticated command injection. Exploitation requires valid administrative credentials and results in root-level code execution and unauthorized data access. No patches are available; mitigation requires disabling the affected feature.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Affected products
Cisco · Cisco Small Business RV Series Router Firmware
Related CVEs — Cisco Small Business RV Series Router Firmware

In the same product, most dangerous first.

CVE-2019-1653HIGHCisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityEPSS 99.9%KEVCVE-2019-1652HIGHCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityEPSS 95.9%KEVCVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEVCVE-2022-20703CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.2%KEV