CVE-2023-20025: falha crítica em Cisco Small Business RV Series Router Firmware
Publicada em · Atualizada em
48Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendcvss 9epss 1.6%
da publicação à arma101 dias
Publicada no NVD19 de jan.
1ª PoC+101d
probabilidade de exploração
1.6%top 24% das CVEs
exploração observada
nãonenhuma fonte reporta
1 exploit(s) público(s)
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device.
This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Small Business RV Series Router FirmwarePoCs públicas encontradas — 1
githubgithub.com/lnversed/CVE-2023-20025★ 0⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Cisco Small Business RV Series Router Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2019-1653HIGHCisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityEPSS 99.9%KEVCVE-2019-1652HIGHCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityEPSS 95.9%KEVCVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2023-20118MEDIUMCVE-2023-20118EPSS 54.1%KEVCVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEV