Cisco RV110W/RV130/RV130W/RV215W Web-based Management Interface HTTP Requests memory corruption

Summaryinfo

A vulnerability labeled as critical has been found in Cisco RV110W, RV130, RV130W and RV215W. This vulnerability affects unknown code of the component Web-based Management Interface. The manipulation as part of HTTP Requests results in memory corruption. This vulnerability is known as CVE-2020-3145. It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability, which was classified as critical, was found in Cisco RV110W, RV130, RV130W and RV215W (Router Operating System) (the affected version unknown). Affected is an unknown part of the component Web-based Management Interface. The manipulation as part of a HTTP Requests leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit these vulnerabilities by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user.

The weakness was published 07/16/2020 as cisco-sa-rv-rce-m4FEEGWX as confirmed advisory (Website). The advisory is shared for download at tools.cisco.com. This vulnerability is traded as CVE-2020-3145 since 12/12/2019. It is possible to launch the attack remotely. A authentication is necessary for exploitation. There are neither technical details nor an exploit publicly available.

Upgrading eliminates this vulnerability.

Similar entry is available at VDB-158701. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• RV110W
• RV130
• RV130W
• RV215W

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion