PT-2014-3778 · Cisco · Cisco Rv215W+2

Rysh · Publicado 2014-03-06 · Atualizado 2018-12-15 · CVE-2014-0683

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions 1.2.0.9 and earlier Cisco RV215W versions 1.1.0.5 and earlier Cisco CVR100W versions 1.0.1.19 and earlier

Description The issue concerns the web management interface of certain Cisco devices, where it fails to prevent the replaying of modified authentication requests. This allows remote attackers to gain administrative access by intercepting requests.

Recommendations For Cisco RV110W versions 1.2.0.9 and earlier, update to a version later than 1.2.0.9 to resolve the issue. For Cisco RV215W versions 1.1.0.5 and earlier, update to a version later than 1.1.0.5 to resolve the issue. For Cisco CVR100W versions 1.0.1.19 and earlier, update to a version later than 1.0.1.19 to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2014-0683

Produtos afetados

Cisco Cvr100W

Cisco Rv110W

Cisco Rv215W

Referências · 3

• 🔥 https://exploit-db.com/exploits/45986 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-0683 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd · Aviso do Fabricante