Detections
Analytics

Cisco Small Business Routers RV016, RV042, RV042G, and RV082 Arbitrary Command Execution (cisco-sa-20191106-sbrv-cmd-x)

high Nessus Plugin ID 151459

Language:

Synopsis

The remote device is missing a vendor-supplied security patch

Description

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload.
An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.

Please see the included Cisco BID(s) and Cisco Security Advisory for more information.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to the relevant fixed version referenced in Cisco bug ID CSCvq95596, CSCvq9702 or CSCvq97031

See Also

http://www.nessus.org/u?56939222

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq95596

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq97028

https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvq97031

Plugin Details

Severity: High

ID: 151459

File Name: cisco-sa-20191106-sbrv-cmd-x.nasl

Version: 1.7

Type: remote

Family: CISCO

Published: 7/8/2021

Updated: 6/8/2022

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: High

Score: 8.9

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2019-15271

CVSS v3

Risk Factor: High

Base Score: 8.8

Temporal Score: 8.4

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: x-cpe:/o:cisco:small_business_rv_series_router_firmware

Required KB Items: Cisco/Small_Business_Router/Version, Cisco/Small_Business_Router/Model

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/6/2019

Vulnerability Publication Date: 11/6/2019

CISA Known Exploited Vulnerability Due Dates: 6/22/2022

Reference Information

CVE: CVE-2019-15271