Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cisco rv042 dual wan vpn router firmware vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2015-6418
The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote malicious users to determine a TLS key pair via unspecified computations upon handshake key-exchange data, ak...
Cisco Sa520 2.2.07Cisco Sa540 2.2.07Cisco Sa520w 2.2.07Cisco Rv082 Dual Wan Vpn Router Firmware 4.0.0.7Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.0.0.7Cisco Rv016 Multi-wan Vpn Firmware 4.0.0.7Cisco Rv016 Multi-wan Vpn Firmware 4.0.2.8Cisco Rv042 Dual Wan Vpn Router Firmware 4.0.2.8Cisco Rv082 Dual Wan Vpn Router Firmware 4.0.2.8Cisco Rv016 Multi-wan Vpn Firmware 4.0.5.0Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.2.2.7Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.2.2.8
9
CVSSv2
CVE-2019-15271
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote malicious user to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session to...
Cisco Rv016 Multi-wan Vpn FirmwareCisco Rv042 Dual Wan Vpn FirmwareCisco Rv042g Dual Gigabit Wan Vpn FirmwareCisco Rv082 Dual Wan Vpn Firmware
9
CVSSv2
CVE-2019-15957
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands wil...
Cisco Rv016 Multi-wan Vpn FirmwareCisco Rv042 Dual Wan VpnCisco Rv042g Dual Gigabit Wan Vpn FirmwareCisco Rv082 Dual Wan Vpn Router FirmwareCisco Rv320 FirmwareCisco Rv325 Firmware
5
CVSSv2
CVE-2019-15990
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote malicious user to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of...
Cisco Rv016 Multi-wan Vpn FirmwareCisco Rv042 Dual Wan Vpn FirmwareCisco Rv042g Dual Gigabit Wan Vpn FirmwareCisco Rv082 Dual Wan Vpn Firmware
8.3
CVSSv2
CVE-2020-25681
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in the way RRSets are sorted before validating with DNSSEC data. An attacker on the network, who can forge DNS replies such as that they are accepted as valid, could use this flaw to cause a buff...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
8.3
CVSSv2
CVE-2020-25682
A flaw was found in dnsmasq prior to 2.83. A buffer overflow vulnerability exists in the way dnsmasq extract names from DNS packets before validating them with DNSSEC data. An attacker on the network, who can create valid DNS replies, could use this flaw to cause an overflow with...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
7.1
CVSSv2
CVE-2020-25683
A flaw was found in dnsmasq before version 2.83. A heap-based buffer overflow exists in dnsmasq when DNSSEC is enabled and before it validates the received DNS entries. A remote attacker, who can create valid DNS replies, could use this flaw to cause an overflow in a heap-allocat...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0
4.3
CVSSv2
CVE-2020-25684
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in the forward.c:reply_query() if the reply destination address/port is used by the pending forwarded queries. However, it does not use the address/port to retrieve the ex...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 9.0Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25685
A flaw was found in dnsmasq before version 2.83. When getting a reply from a forwarded query, dnsmasq checks in forward.c:reply_query(), which is the forwarded query that matches the reply, by only using a weak hash of the query name. Due to the weak hash (CRC32 when dnsmasq is c...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
4.3
CVSSv2
CVE-2020-25686
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending request for the same name and forwards a new request. By default, a maximum of 150 pending queries can be sent to upstream servers, so there can be at most 150 ...
Thekelleys DnsmasqFedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Arista Eos
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook