Multiple Cisco RV Series Routers CVE-2014-2178 Cross Site Request Forgery Vulnerability

Bugtraq ID:	70922
Class:	Design Error
CVE:	CVE-2014-2178
Remote:	Yes
Local:	No
Published:	Nov 05 2014 12:00AM
Updated:	Nov 24 2014 02:58AM
Credit:	Yorick Koster of Securify.
Vulnerable:
Not Vulnerable:

Multiple Cisco RV Series Routers CVE-2014-2178 Cross Site Request Forgery Vulnerability

Multiple Cisco RV Series Routers are prone to an unspecified cross-site request-forgery vulnerability.

Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain unauthorized access to the affected device.

This issue is being tracked by Cisco Bug IDs CSCuh87145.

Multiple Cisco RV Series Routers CVE-2014-2178 Cross Site Request Forgery Vulnerability

To exploit the issue an attacker must entice a user into visiting a malicious site.

Multiple Cisco RV Series Routers CVE-2014-2178 Cross Site Request Forgery Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Multiple Cisco RV Series Routers CVE-2014-2178 Cross Site Request Forgery Vulnerability

References:

• Cisco Homepage (Cisco)