CVE-2020-3146

Name of the Vulnerable Software and Affected Versions Cisco RV110W Wireless-N VPN Firewall (affected versions not specified) Cisco RV130 VPN Router (affected versions not specified) Cisco RV130W Wireless-N Multifunction VPN Router (affected versions not specified) Cisco RV215W Wireless-N VPN Router (affected versions not specified)

Description The issue is related to improper validation of user-supplied data in the web-based management interface, which could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This is due to a buffer overflow in memory. An attacker could exploit this by sending malicious HTTP requests to a targeted device, potentially allowing them to execute arbitrary code on the underlying operating system as a high-privilege user.

Recommendations For Cisco RV110W Wireless-N VPN Firewall, consider restricting access to the web-based management interface until a patch is available. For Cisco RV130 VPN Router, restrict access to the web-based management interface to minimize the risk of exploitation. For Cisco RV130W Wireless-N Multifunction VPN Router, avoid using the web-based management interface for critical operations until the issue is resolved. For Cisco RV215W Wireless-N VPN Router, as a temporary workaround, consider disabling remote access to the web-based management interface until a patch is available.