Cisco Small Business RV Series Router up to 4.2.3.14 Web-based Management Interface cross site scripting

Summaryinfo

A vulnerability was found in Cisco Small Business RV Series Router. It has been rated as problematic. This affects an unknown part of the component Web-based Management Interface. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2024-20362. The attack is possible to be carried out remotely. No exploit exists. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Cisco Small Business RV Series Router. It has been rated as problematic. This issue affects an unknown function of the component Web-based Management Interface. The manipulation with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-80. The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages. Impacted is integrity. The summary by CVE is:

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.

The advisory is shared at sec.cloudapps.cisco.com. The identification of this vulnerability is CVE-2024-20362 since 11/08/2023. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

Upgrading eliminates this vulnerability.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• Small Business RV Series Router

Version

• 1.1.0.09
• 1.1.1.06
• 1.1.1.19
• 1.2.1.14
• 1.3.1.10
• 1.3.1.12
• 1.3.12.6-tm
• 1.3.13.02-tm
• 1.4.2.15
• 1.4.2.17
• 1.4.2.19
• 1.4.2.22
• 1.5.1.05
• 2.0.0.19-tm
• 3.0.0.1-tm
• 4.0.0.7
• 4.0.2.08-tm
• 4.0.3.03-tm
• 4.0.4.02-tm
• 4.1.1.01
• 4.2.2.08
• 4.2.3.03
• 4.2.3.06
• 4.2.3.07
• 4.2.3.09
• 4.2.3.10
• 4.2.3.14

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion