Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service…
Cisco · Cisco Small Business RV Series Router Firmware
A flaw in the Universal Plug-and-Play (UPnP) service of the Cisco Small Business RV Series Router Firmware, affecting the RV110W, RV130, RV130W, and RV215W routers, stems from improper validation of incoming UPnP traffic. An unauthenticated remote attacker who sends a crafted UPnP request to an affected device, with no user interaction required, can execute arbitrary code as root or cause the device to reload, resulting in a denial of service.
A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability.
- Exploited
- Yes, in VulnCheck KEV
- Reports
- 0
- Tactics
- 0/15
Exploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.
First seen exploited 10 months after disclosure. Public exploit code (PoC-in-GitHub) appeared 43 days after disclosure.
- Disclosedday 0
- Public exploit codePoC-in-GitHub+43 days
- First seen exploitedVulnCheck KEV evidence+10 mo
MITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques
No techniques linkedNo ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.