Cisco Small Business RV325 Web-based Management Interface cross site scripting

Summaryinfo

A vulnerability categorized as problematic has been discovered in Cisco Small Business RV016, Small Business RV042, Small Business RV042G, Small Business RV082, Small Business R320 and Small Business RV325. The affected element is an unknown function of the component Web-based Management Interface. Such manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-20147. The attack may be launched remotely. There is no exploit available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco Small Business RV016, Small Business RV042, Small Business RV042G, Small Business RV082, Small Business R320 and Small Business RV325. It has been rated as problematic. Affected by this issue is an unknown functionality of the component Web-based Management Interface. The manipulation with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. CVE summarizes:

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities.

The weakness was shared 04/06/2023 as cisco-sa-rv-stored-xss-vqz7gC8W. The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability is handled as CVE-2023-20147 since 10/27/2022. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1059.007.

Upgrading eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2023-24326). Once again VulDB remains the best source for vulnerability data.

Productinfo

Vendor

• Cisco

Name

• Small Business R320
• Small Business RV016
• Small Business RV042
• Small Business RV042G
• Small Business RV082
• Small Business RV325

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion