CVE-2021-1158

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device.
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*
cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
OR cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*
cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
OR cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*
cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
OR cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*
cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*
cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*

Configuration 5 (hide)

cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*

Information

Published : 2021-01-13 14:15

Updated : 2021-01-15 08:20


NVD link : CVE-2021-1158

Mitre link : CVE-2021-1158


JSON object : View

CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

dedicated server usa

Products Affected

cisco

  • rv110w
  • rv130_vpn_router_firmware
  • rv215w_wireless-n_vpn_router_firmware
  • rv130_vpn_router
  • rv110w_firmware
  • rv130w
  • rv215w_wireless-n_vpn_router
  • application_extension_platform
  • rv130w_firmware