PT-2019-4426 · Cisco · Cisco Small Business Rv016+3

Publicado 2019-11-06 · Atualizado 2019-11-06

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, and RV082 versions (affected versions not specified)

Description The issue is related to the presence of embedded authentication credentials, specifically a static X.509 certificate, in the firmware of the affected devices. This could allow a remote attacker to elevate their privileges.

Recommendations For Cisco Small Business RV016, RV042, RV042G, and RV082, consider restricting access to the device until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Enumeração de Fraquezas

CWE-798

Identificadores relacionados

BDU:2020-00169

Produtos afetados

Cisco Small Business Rv016

Cisco Small Business Rv042

Cisco Small Business Rv042G

Cisco Small Business Rv082

Referências · 2

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-rv0x2 · Nota
• https://bdu.fstec.ru/vul/2020-00169 · Nota de Segurança