Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
BID:107185
CVE-2019-1663 |Info
Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
| Bugtraq ID: | 107185 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1663 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 27 2019 12:00AM |
| Updated: | Feb 27 2019 12:00AM |
| Credit: | Yu Zhang and Haoliang Lu from GeekPwn conference and T. Shiomitsu from Pen Test Partners LLP. |
| Vulnerable: |
Cisco Small Business RV Series Routers 1.3.0.8 Cisco Small Business RV Series Routers 1.2.1.7 Cisco Small Business RV Series Routers 1.0.1.2 Cisco RV215W Wireless-N VPN Router 0 Cisco RV130W Wireless-N Multifunction VPN Router 0 Cisco RV110W Wireless-N VPN Firewall 0 |
| Not Vulnerable: |
Cisco Small Business RV Series Routers 1.3.1.1 Cisco Small Business RV Series Routers 1.2.2.1 Cisco Small Business RV Series Routers 1.0.3.45 Cisco RV215W Wireless-N VPN Router 1.3.1.1 Cisco RV130W Wireless-N Multifunction VPN Router 1.0.3.45 Cisco RV110W Wireless-N VPN Firewall 1.2.2.1 |
Discussion
Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
Cisco RV110W, RV130W, and RV215W Routers are prone to a remote command-execution vulnerability.
A remote attacker can exploit this issue to execute arbitrary commands on the host operating system with escalated privileges.
This issue is tracked by Cisco Bug ID CSCvn18638, CSCvn18639, CSCvn18642.
The following Cisco products are affected:
Cisco RV110W Wireless-N VPN Firewall
Cisco RV130W Wireless-N Multifunction VPN Router
Cisco RV215W Wireless-N VPN Router
Cisco RV110W, RV130W, and RV215W Routers are prone to a remote command-execution vulnerability.
A remote attacker can exploit this issue to execute arbitrary commands on the host operating system with escalated privileges.
This issue is tracked by Cisco Bug ID CSCvn18638, CSCvn18639, CSCvn18642.
The following Cisco products are affected:
Cisco RV110W Wireless-N VPN Firewall
Cisco RV130W Wireless-N Multifunction VPN Router
Cisco RV215W Wireless-N VPN Router
Exploit / POC
Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Cisco RV110W/RV130W/RV215W Routers CVE-2019-1663 Remote Command Execution Vulnerability
References:
References: