PT-2019-4426 · Cisco · Cisco Small Business Rv016+3

Published 2019-11-06 · Updated 2019-11-06

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV016, RV042, RV042G, and RV082 versions (affected versions not specified)

Description The issue is related to the presence of embedded authentication credentials, specifically a static X.509 certificate, in the firmware of the affected devices. This could allow a remote attacker to elevate their privileges.

Recommendations For Cisco Small Business RV016, RV042, RV042G, and RV082, consider restricting access to the device until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2020-00169

Affected Products

Cisco Small Business Rv016

Cisco Small Business Rv042

Cisco Small Business Rv042G

Cisco Small Business Rv082

References · 2

• https://bdu.fstec.ru/vul/2020-00169 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20191106-rv0x2 · Note