According to its self-reported version, Cisco Small Business RV016, RV042, RV042G,  RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities is affected by multiple vulnerabilities:

  - Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G,     RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting     (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by     the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP     requests to an affected device and then persuading a user to visit specific web pages that include malicious     payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the     affected interface or access sensitive, browser-based information. Cisco has not released software updates that     address these vulnerabilities.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Detections

Analytics

Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers XSS Vulnerabilities (cisco-sa-rv-stored-xss-vqz7gC8W)

medium Nessus Plugin ID 173978

Version 1.1

Version 1.0

Version 1.1 Oct 24, 2023, 4:27 PM CVSSv2 score source (changed from "CVE-2023-20137" to "CVE-2023-20151") CVSSv3 score source (changed from "CVE-2023-20151" to "None") Plugin Feed: 202310241627
Version 1.0 Apr 6, 2023, 6:58 PM New Plugin Feed: 202304061858