Vulnerability · Published Jun 18, 2020 · Assigned by cisco
CVE-2020-3268Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities
High 7.2
In plain English
A high-severity memory corruption in Cisco RV130W Wireless-N Multifunction VPN Router Firmware from Cisco. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.6% (higher than 85% of all known vulnerabilities).
Severity (CVSS 3.0)7.2High
Exploit odds (30 days)2.6%top 14.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Multiple vulnerabilities in the web-based management interface of Cisco RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands. For more information about these vulnerabilities, see the Details section of this advisory.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Cisco RV130W Wireless-N Multifunction VPN Router Firmware | n/a |
Weakness: CWE-119 · Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- 20200617 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Management Interface Vulnerabilities vendor-advisory, x_refsource_CISCO