CVE-2022-20825

Summary

CVE	CVE-2022-20825
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2022-06-15 18:15:00 UTC
Updated	2023-11-07 03:43:00 UTC
Description	A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Cisco has not released software updates that address this vulnerability.

Risk And Classification

Problem Types: CWE-787

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Rv110w	-	All	All	All
Operating System	Cisco	Rv110w Firmware	-	All	All	All
Hardware	Cisco	Rv130	-	All	All	All
Hardware	Cisco	Rv130w	-	All	All	All
Operating System	Cisco	Rv130w Firmware	-	All	All	All
Operating System	Cisco	Rv130 Firmware	-	All	All	All
Hardware	Cisco	Rv215w	-	All	All	All
Operating System	Cisco	Rv215w Firmware	-	All	All	All

References

Reference	Source	Link	Tags
20220615 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability	CISCO	tools.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

730526 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service (DoS) Vulnerability (cisco-sa-sb-rv-overflow-s2r82P9v)