cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2020-3144,https://securityvulnerability.io/vulnerability/CVE-2020-3144,"Cisco RV110W, RV130, RV130W, and RV215W Routers Authentication Bypass Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. The vulnerability is due to improper session management on affected devices. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,9.8,CRITICAL,0.012629999779164791,false,,false,false,true,2024-08-04T08:16:26.000Z,,false,false,,2020-07-16T18:15:00.000Z,0 CVE-2020-3145,https://securityvulnerability.io/vulnerability/CVE-2020-3145,"Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities","Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit these vulnerabilities by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.8,HIGH,0.0017999999690800905,false,,false,false,true,2024-08-04T08:16:26.000Z,,false,false,,2020-07-16T18:15:00.000Z,0 CVE-2020-3332,https://securityvulnerability.io/vulnerability/CVE-2020-3332,"Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability","A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affected device. The vulnerability is due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary shell commands or scripts with root privileges on the affected device.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.1,HIGH,0.0017900000093504786,false,,false,false,true,2024-08-04T08:16:35.000Z,,false,false,,2020-07-16T18:15:00.000Z,0 CVE-2020-3146,https://securityvulnerability.io/vulnerability/CVE-2020-3146,"Cisco RV110W, RV130, RV130W, and RV215W Routers Management Interface Remote Command Execution Multiple Vulnerabilities","Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit these vulnerabilities by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.8,HIGH,0.0017999999690800905,false,,false,false,true,2024-08-04T08:16:26.000Z,,false,false,,2020-07-16T18:15:00.000Z,0 CVE-2020-3269,https://securityvulnerability.io/vulnerability/CVE-2020-3269,"Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities","Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,7.2,HIGH,0.006750000175088644,false,,false,false,true,2024-08-04T08:16:32.000Z,,false,false,,2020-06-18T03:15:00.000Z,0 CVE-2020-3268,https://securityvulnerability.io/vulnerability/CVE-2020-3268,"Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities","Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,7.2,HIGH,0.006750000175088644,false,,false,false,true,2024-08-04T08:16:32.000Z,,false,false,,2020-06-18T03:15:00.000Z,0 CVE-2019-1843,https://securityvulnerability.io/vulnerability/CVE-2019-1843,"Cisco RV110W, RV130W, and RV215W Routers Management Interface Denial of Service Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to reload the device and causing a DoS condition.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.6,HIGH,0.0009399999980814755,false,,false,false,true,2024-08-04T19:16:13.000Z,,false,false,,2019-06-20T03:15:00.000Z,0 CVE-2019-1897,https://securityvulnerability.io/vulnerability/CVE-2019-1897,"Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability","A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,5.3,MEDIUM,0.004670000169426203,false,,false,false,true,2024-08-04T19:16:16.000Z,,false,false,,2019-06-20T03:15:00.000Z,0 CVE-2019-1899,https://securityvulnerability.io/vulnerability/CVE-2019-1899,"Cisco RV110W, RV130W, and RV215W Routers Information Disclosure Vulnerability","A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing a specific URI on the web interface of the router.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,5.3,MEDIUM,0.004780000075697899,false,,false,false,true,2024-08-04T19:16:16.000Z,,false,false,,2019-06-20T03:15:00.000Z,0 CVE-2019-1898,https://securityvulnerability.io/vulnerability/CVE-2019-1898,"Cisco RV110W, RV130W, and RV215W Routers Unauthenticated syslog File Access Vulnerability","A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the attacker to access the information contained in the file.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,5.3,MEDIUM,0.024119999259710312,false,,false,false,true,2024-08-04T19:16:16.000Z,,false,false,,2019-06-20T03:15:00.000Z,0 CVE-2018-0426,https://securityvulnerability.io/vulnerability/CVE-2018-0426,"Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to the targeted device. A successful exploit could allow the attacker to gain access to arbitrary files on the affected device, resulting in the disclosure of sensitive information.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,9.8,CRITICAL,0.004699999932199717,false,,false,false,false,,,false,false,,2018-10-05T14:29:00.000Z,0 CVE-2018-0424,https://securityvulnerability.io/vulnerability/CVE-2018-0424,"Cisco RV110W, RV130W, and RV215W Routers Management Interface Command Injection Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input to scripts by the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the root user.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.8,HIGH,0.0007900000200606883,false,,false,false,false,,,false,false,,2018-10-05T14:29:00.000Z,0 CVE-2018-0423,https://securityvulnerability.io/vulnerability/CVE-2018-0423,"Cisco RV110W, RV130W, and RV215W Routers Management Interface Buffer Overflow Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial of service condition or to execute arbitrary code. The vulnerability is due to improper boundary restrictions on user-supplied input in the Guest user feature of the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device, triggering a buffer overflow condition. A successful exploit could allow the attacker to cause the device to stop responding, resulting in a denial of service condition, or could allow the attacker to execute arbitrary code.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,8.1,HIGH,0.020719999447464943,false,,false,false,false,,,false,false,,2018-10-05T14:29:00.000Z,0 CVE-2018-0425,https://securityvulnerability.io/vulnerability/CVE-2018-0425,"Cisco RV110W, RV130W, and RV215W Routers Management Interface Information Disclosure Vulnerability","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device. A successful exploit could allow the attacker to gain access to sensitive configuration information, including user authentication credentials.",Cisco,Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware,9.8,CRITICAL,0.002309999894350767,false,,false,false,false,,,false,false,,2018-10-05T14:29:00.000Z,0