CVE-2020-3331criticalCWE-119

CVE-2020-3331: falha crítica em Cisco RV110W Wireless-N VPN Firewall Firmware

Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Cisco RV110W Wireless-N VPN Firewall

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

40Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.8epss 42%
A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input data by the web-based management interface. An attacker could exploit this vulnerability by sending crafted requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco RV110W Wireless-N VPN Firewall Firmware
CVEs relacionadas — Cisco RV110W Wireless-N VPN Firewall Firmware

No mesmo produto, das mais perigosas para as menos.

CVE-2020-3330CRITICALCisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential VulnerabilityEPSS 3.4%CVE-2020-3150MEDIUMCisco Small Business RV110W and RV215W Series Routers Information Disclosure VulnerabilityEPSS 1.5%