CVE-2021-1294 : Multiple vulnerabilities in the web-based management interface of Cisco Small Bu

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device.

Published 2021-02-04 17:15:16

Updated 2021-02-08 16:17:19

Source Cisco Systems, Inc.

View at NVD, CVE.org

Vulnerability category: Execute code

Products affected by CVE-2021-1294

Cisco » Rv160w Wireless-ac Vpn Router Firmware
Versions before (<) 1.0.01.02
cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Rv160w Wireless-ac Vpn Router » Version: N/A
Cisco » Rv260 Vpn Router Firmware
Versions before (<) 1.0.01.02
cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Rv260 Vpn Router » Version: N/A
Cisco » Rv260p Vpn Router With Poe Firmware
Versions before (<) 1.0.01.02
cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Rv260p Vpn Router With Poe » Version: N/A
Cisco » Rv260w Wireless-ac Vpn Router Firmware
Versions before (<) 1.0.01.02
cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Rv260w Wireless-ac Vpn Router » Version: N/A
Cisco » Rv160 Vpn Router Firmware
Versions before (<) 1.0.01.02
cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Rv160 Vpn Router » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2021-1294

EPSS FAQ

0.38%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 74 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2021-1294

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Cisco Systems, Inc.
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2021-1294

CWE-472 External Control of Assumed-Immutable Web Parameter

The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.

Assigned by: ykramarz@cisco.com (Primary)

References for CVE-2021-1294

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf

Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2021-1294

Products affected by CVE-2021-1294

Exploit prediction scoring system (EPSS) score for CVE-2021-1294

CVSS scores for CVE-2021-1294

CWE ids for CVE-2021-1294

References for CVE-2021-1294