Skip to content
OpenAdvisories
Critical · 9.8 CVE-2020-3331 EUVD-2020-24602GHSA-7prw-wc7c-g95v

Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

Published Jul 16, 2020 · Updated Nov 15, 2024 · Assigned by cisco

Description

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input data by the web-based management interface. An attacker could exploit this vulnerability by sending crafted requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user.

Affected products

VendorProductAffectedFixed
Cisco Cisco RV110W Wireless-N VPN Firewall Firmware — —

References