Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4cw-h889-p6jj

Опубликовано: 20 янв. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A vulnerability in the web-based management interface of Cisco Small Business RV042 Series Routers could allow an unauthenticated, remote attacker to bypass authentication on the affected device. This vulnerability is due to incorrect user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending crafted requests to the web-based management interface. A successful exploit could allow the attacker to gain root privileges on the affected device.

A vulnerability in the web-based management interface of Cisco Small Business RV042 Series Routers could allow an unauthenticated, remote attacker to bypass authentication on the affected device. This vulnerability is due to incorrect user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending crafted requests to the web-based management interface. A successful exploit could allow the attacker to gain root privileges on the affected device.

EPSS

Процентиль: 51%
0.00284
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-290
CWE-293

Связанные уязвимости

CVSS3: 9
nvd
около 3 лет назад

A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.

CVSS3: 9
fstec
около 3 лет назад

Уязвимость веб-интерфейса управления микропрограммного обеспечения маршрутизаторов Cisco Small Business RV016, RV042, RV042G и RV082, позволяющая нарушителю получить root-доступ к базовой операционной системе

EPSS

Процентиль: 51%
0.00284
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-20
CWE-290
CWE-293