Kai Cheng

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The vulnerability is related to insufficient validation of user-supplied input in the web-based management interface of the affected routers. This could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. An attacker could exploit this by sending crafted HTTP requests to a targeted device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system. The attacker would need valid administrator credentials on an affected device to exploit the vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. An authenticated, remote attacker could exploit this by sending crafted HTTP requests to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) Description: The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing them to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device to exploit this issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 (affected versions not specified) **Description** The issue is related to insufficient validation of user-supplied input in the web-based management interface of the affected routers. This could allow a remote attacker to inject arbitrary commands that are executed with root privileges. An attacker could exploit this by sending crafted HTTP requests to a targeted device, potentially allowing them to execute arbitrary code as the root user on the underlying operating system. The attacker would need to have valid administrator credentials on an affected device to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing them to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this issue. **Recommendations** For Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers, consider disabling the web-based management interface until a patch is available. Restrict access to the web-based management interface to minimize the risk of exploitation. Avoid using the web-based management interface for administrative tasks until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. An authenticated, remote attacker could exploit this by sending crafted HTTP requests to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) Description: The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. An authenticated, remote attacker could exploit this by sending crafted HTTP requests to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit the issue. Recommendations: For Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers, consider restricting access to the web-based management interface until a fix is available. As a temporary workaround, limit the use of administrator credentials to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) Description: The vulnerability is due to improper validation of user-supplied input in the web-based management interface of the affected routers. An attacker could exploit this by sending crafted HTTP requests to a targeted device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system. The attacker would need valid administrator credentials on an affected device to exploit the vulnerability. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) **Description** The vulnerability is related to insufficient validation of user-supplied input in the web-based management interface of the affected routers. This could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. An attacker could exploit this by sending crafted HTTP requests to a targeted device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system. The attacker would need valid administrator credentials on an affected device to exploit the vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow an authenticated, remote attacker to inject arbitrary commands with root privileges. An attacker could exploit this by sending crafted HTTP requests to a targeted device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system. The attacker would need valid administrator credentials on an affected device to exploit this issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers (affected versions not specified) Description: The issue is related to insufficient validation of user-supplied input in the web-based management interface, which could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing them to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device to exploit this issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) Description: The issue is related to improper validation of user-supplied input in the web-based management interface of the affected routers. This could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly by sending crafted HTTP requests. A successful exploit could result in the execution of arbitrary code as the root user on the underlying operating system or cause the device to reload, leading to a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit these vulnerabilities. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco RV110W (affected versions not specified) Cisco RV130 (affected versions not specified) Cisco RV130W (affected versions not specified) Cisco RV215W (affected versions not specified) Description: The issue exists due to insufficient validation of user input in the web-based management interface of the affected routers. This could allow a remote attacker with valid administrator credentials to execute arbitrary code or cause the device to restart unexpectedly by sending crafted HTTP requests to the affected device. The exploitation of this issue may result in the execution of arbitrary code as the root user on the underlying operating system or cause the device to reload, leading to a denial of service condition. Recommendations: For Cisco RV110W, update to a version that addresses the issue, if available. For Cisco RV130, update to a version that addresses the issue, if available. For Cisco RV130W, update to a version that addresses the issue, if available. For Cisco RV215W, update to a version that addresses the issue, if available. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation. Avoid using the web-based management interface until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) **Description** The issue is due to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) Description: The issue is due to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) Description: The issue is due to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) **Description** The issue is due to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this issue. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) **Description** The issue is related to improper validation of user-supplied input in the web-based management interface, which could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. This is also due to a buffer overflow on the stack. An attacker could exploit these issues by sending crafted HTTP requests to an affected device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need to have valid administrator credentials on the affected device to exploit these issues. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified) **Description** The issue is due to improper validation of user-supplied input in the web-based management interface, allowing an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially executing arbitrary code as the root user on the underlying operating system or causing the device to reload, resulting in a denial of service (DoS) condition. The attacker would need valid administrator credentials on the affected device to exploit this. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.