CVE-2023-20124

Summary

CVE	CVE-2023-20124
State	PUBLIC
Assigner	[email protected]
Source Priority	CVE Program / NVD first with legacy fallback
Published	2023-04-05 18:15:00 UTC
Updated	2023-11-07 04:06:00 UTC
Description	A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not released software updates that address this vulnerability.

Risk And Classification

Problem Types: CWE-77

NVD Known Affected Configurations (CPE 2.3)

Type	Vendor	Product	Version	Update	Edition	Language
Hardware	Cisco	Rv016	-	All	All	All
Operating System	Cisco	Rv016 Firmware	-	All	All	All
Hardware	Cisco	Rv042	-	All	All	All
Hardware	Cisco	Rv042g	-	All	All	All
Operating System	Cisco	Rv042g Firmware	-	All	All	All
Operating System	Cisco	Rv042 Firmware	-	All	All	All
Hardware	Cisco	Rv082	-	All	All	All
Operating System	Cisco	Rv082 Firmware	-	All	All	All
Hardware	Cisco	Rv320	-	All	All	All
Operating System	Cisco	Rv320 Firmware	-	All	All	All
Hardware	Cisco	Rv325	-	All	All	All
Operating System	Cisco	Rv325 Firmware	-	All	All	All

References

Reference	Source	Link	Tags
Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers Remote Command Execution Vulnerability	CISCO	sec.cloudapps.cisco.com
CVE Program record	CVE.ORG	www.cve.org	canonical
NVD vulnerability detail	NVD	nvd.nist.gov	canonical, analysis

No vendor comments have been submitted for this CVE.

Legacy QID Mappings

730780 Cisco Small Business RV (016|042|042G|082|320|325) Routers Multiple Vulnerabilities (cisco-sa-sb-rv01x_rv32x_rce-nzAGWWDD, cisco-sa-rv-stored-xss-vqz7gC8W)