Cisco RV110W/RV130/RV130W/RV215W Web-based Management Interface HTTP Requests memory corruption

Summaryinfo

A vulnerability marked as critical has been reported in Cisco RV110W, RV130, RV130W and RV215W. This issue affects some unknown processing of the component Web-based Management Interface. This manipulation as part of HTTP Requests causes memory corruption. This vulnerability is handled as CVE-2020-3146. The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability has been found in Cisco RV110W, RV130, RV130W and RV215W (Router Operating System) (the affected version is unknown) and classified as critical. Affected by this vulnerability is an unknown code of the component Web-based Management Interface. The manipulation as part of a HTTP Requests leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an authenticated, remote attacker to execute arbitrary code on an affected device. The vulnerabilities are due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit these vulnerabilities by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user.

The weakness was released 07/16/2020 as cisco-sa-rv-rce-m4FEEGWX as confirmed advisory (Website). The advisory is shared at tools.cisco.com. This vulnerability is known as CVE-2020-3146 since 12/12/2019. The attack can be launched remotely. A single authentication is needed for exploitation. Neither technical details nor an exploit are publicly available.

Upgrading eliminates this vulnerability.

Entry connected to this vulnerability is available at VDB-158700. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• RV110W
• RV130
• RV130W
• RV215W

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion