Lucene search

CiscoCVE-2018-0404

HistoryOct 05, 2018 - 4:29 p.m.

CVE-2018-0404

2018-10-0516:29:00

CWE-89

cisco

web.nvd.nist.gov

cisco

rv180w

rv220w

vulnerability

web framework

code

remote attacker

sql injection

end-of-life

firmware

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. The product has entered the end-of-life phase and there will be no more firmware fixes.

Affected configurations

Nvd

Node

ciscorv180w_wireless-n_multifunction_vpn_routerMatch-

ciscorv220w_wireless_network_security_firewallMatch-

VendorProductVersionCPE
ciscorv180w_wireless-n_multifunction_vpn_router-cpe:2.3:h:cisco:rv180w_wireless-n_multifunction_vpn_router:-:*:*:*:*:*:*:*
ciscorv220w_wireless_network_security_firewall-cpe:2.3:h:cisco:rv220w_wireless_network_security_firewall:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	rv180w_wireless-n_multifunction_vpn_router	-	cpe:2.3:h:cisco:rv180w_wireless-n_multifunction_vpn_router:-:::::::*
cisco	rv220w_wireless_network_security_firewall	-	cpe:2.3:h:cisco:rv220w_wireless_network_security_firewall:-:::::::*

CNA Affected

[
  {
    "product": "Cisco RV180W Wireless-N Multifunction VPN Router",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

bst.cloudapps.cisco.com/bugsearch/bug/CSCvk27179

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.9

Confidence

High

EPSS

0.002

Percentile

64.4%

JSON

Related for CVE-2018-0404