PT-2020-2952 · Cisco · Cisco Rv110W+3

Published 2020-06-17 · Updated 2021-10-19 · CVE-2020-3269

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco RV110W versions (affected versions not specified) Cisco RV130 versions (affected versions not specified) Cisco RV130W versions (affected versions not specified) Cisco RV215W versions (affected versions not specified)

Description The issue is related to insufficient input validation in the web interface configuration of the affected routers. This could allow a remote attacker with administrative privileges to execute arbitrary commands.

Recommendations For Cisco RV110W, update the firmware to a version that addresses the issue. For Cisco RV130, update the firmware to a version that addresses the issue. For Cisco RV130W, update the firmware to a version that addresses the issue. For Cisco RV215W, update the firmware to a version that addresses the issue.

Fix

Buffer Overflow

Memory Corruption

RCE

Weakness Enumeration

CWE-119

CWE-787

CWE-20

Related Identifiers

BDU:2020-03109

CVE-2020-3269

Affected Products

Cisco Rv110W

Cisco Rv130

Cisco Rv130W

Cisco Rv215W

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-3269 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-routers-injection-tWC7krKQ · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-03109 · Security Note
• https://osv.dev/vulnerability/CVE-2020-3269 · Vendor Advisory