Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote malicious user to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the malicious user to remotely execute arbitrary code on the device.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
cisco rv160w_wireless-ac_vpn_router_firmware |
||
cisco rv260_vpn_router_firmware |
||
cisco rv260p_vpn_router_with_poe_firmware |
||
cisco rv260w_wireless-ac_vpn_router_firmware |
||
cisco rv160_vpn_router_firmware |
Vulmon