CVE-2019-1843

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall (affected versions not specified) Cisco RV130W Wireless-N Multifunction VPN Router (affected versions not specified) Cisco RV215W Wireless-N VPN Router (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to cause a reload of an affected device, resulting in a denial of service (DoS) condition. This issue is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this by sending malicious HTTP requests to a targeted device, allowing them to reload the device and cause a DoS condition.

Recommendations For Cisco RV110W Wireless-N VPN Firewall, consider temporarily restricting access to the web-based management interface until a patch is available. For Cisco RV130W Wireless-N Multifunction VPN Router, restrict access to the web-based management interface to minimize the risk of exploitation. For Cisco RV215W Wireless-N VPN Router, avoid using the web-based management interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.