CiscoCVE-2014-2179CVE-2014-2179
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
70.3%
The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | rv180_firmware | * | cpe:2.3:o:cisco:rv180_firmware:*:*:*:*:*:*:*:* |
| cisco | rv180 | - | cpe:2.3:h:cisco:rv180:-:*:*:*:*:*:*:* |
| cisco | rv180w | - | cpe:2.3:h:cisco:rv180w:-:*:*:*:*:*:*:* |
| cisco | rv120w_firmware | * | cpe:2.3:o:cisco:rv120w_firmware:*:*:*:*:*:*:*:* |
| cisco | rv120w | - | cpe:2.3:h:cisco:rv120w:-:*:*:*:*:*:*:* |
| cisco | rv220w_firmware | * | cpe:2.3:o:cisco:rv220w_firmware:*:*:*:*:*:*:*:* |
| cisco | rv220w | - | cpe:2.3:h:cisco:rv220w:-:*:*:*:*:*:*:* |
References
packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html
seclists.org/fulldisclosure/2014/Nov/6
tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv
www.securityfocus.com/archive/1/533917/100/0/threaded
www.securitytracker.com/id/1031171
exchange.xforce.ibmcloud.com/vulnerabilities/98499
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
Confidence
Low
EPSS
Percentile
70.3%