Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

rv series router firmware vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2015-6418
The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote malicious users to determine a TLS key pair via unspecified computations upon handshake key-exchange data, ak...
Cisco Sa520 2.2.07Cisco Sa540 2.2.07Cisco Sa520w 2.2.07Cisco Rv082 Dual Wan Vpn Router Firmware 4.0.0.7Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.0.0.7Cisco Rv016 Multi-wan Vpn Firmware 4.0.0.7Cisco Rv016 Multi-wan Vpn Firmware 4.0.2.8Cisco Rv042 Dual Wan Vpn Router Firmware 4.0.2.8Cisco Rv082 Dual Wan Vpn Router Firmware 4.0.2.8Cisco Rv016 Multi-wan Vpn Firmware 4.0.5.0Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.2.2.7Cisco Rv042g Dual Gigabit Wan Vpn Firmware 4.2.2.8
9
CVSSv2
CVE-2019-15271
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote malicious user to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session to...
Cisco Rv016 Multi-wan Vpn FirmwareCisco Rv042 Dual Wan Vpn FirmwareCisco Rv042g Dual Gigabit Wan Vpn FirmwareCisco Rv082 Dual Wan Vpn Firmware
6.8
CVSSv2
CVE-2014-2178
Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, prior to 1.0.5.9 on RV120W devices, and prior to 1.0.4.14 on RV180 and RV180W devices allows remote malicious users to hijack the authentication ...
Cisco Rv180 FirmwareCisco Rv180w -Cisco Rv180 -Cisco Rv220w FirmwareCisco Rv220w -Cisco Rv120w FirmwareCisco Rv120w -
9
CVSSv2
CVE-2014-2177
The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, prior to 1.0.5.9 on RV120W devices, and prior to 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, ak...
Cisco Rv120w FirmwareCisco Rv120w -Cisco Rv220w FirmwareCisco Rv220w -Cisco Rv180 FirmwareCisco Rv180w -Cisco Rv180 -
5
CVSSv2
CVE-2014-2179
The Cisco RV router firmware on RV220W devices, prior to 1.0.5.9 on RV120W devices, and prior to 1.0.4.14 on RV180 and RV180W devices allows remote malicious users to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.
Cisco Rv180 FirmwareCisco Rv180 -Cisco Rv180w -Cisco Rv120w FirmwareCisco Rv120w -Cisco Rv220w FirmwareCisco Rv220w -
9
CVSSv2
CVE-2019-15957
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system. When processed, the commands wil...
Cisco Rv016 Multi-wan Vpn FirmwareCisco Rv042 Dual Wan VpnCisco Rv042g Dual Gigabit Wan Vpn FirmwareCisco Rv082 Dual Wan Vpn Router FirmwareCisco Rv320 FirmwareCisco Rv325 Firmware
6.5
CVSSv2
CVE-2021-1413
Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote malicious user to execute arbitrary code with elevated privileges equivalent to the web service process on an...
Cisco Rv340 FirmwareCisco Rv340w FirmwareCisco Rv345 FirmwareCisco Rv345p Firmware
6.5
CVSSv2
CVE-2021-1414
Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote malicious user to execute arbitrary code with elevated privileges equivalent to the web service process on an...
Cisco Rv340 FirmwareCisco Rv340w FirmwareCisco Rv345 FirmwareCisco Rv345p Firmware
6.5
CVSSv2
CVE-2021-1415
Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote malicious user to execute arbitrary code with elevated privileges equivalent to the web service process on an...
Cisco Rv340 FirmwareCisco Rv340w FirmwareCisco Rv345 FirmwareCisco Rv345p Firmware
7.2
CVSSv2
CVE-2021-1520
A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local malicious user to run arbitrary commands with root privileges on the underlying operating system (OS). This vulnerability ...
Cisco Rv340 FirmwareCisco Rv340w FirmwareCisco Rv345 FirmwareCisco Rv345p Firmware
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4040privilege escalationCVE-2024-4112CVE-2024-32872man-in-the-middleCVE-2024-32788bypassCVE-2024-3400CVE-2024-28976
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook