HIGH🚩 CISA KEV⚡ EXPLOIT✓ PATCH🇵🇱 Wersja polska

CVE-2019-15271

CVSS 8.8v3.1pub. 2019-11-26upd. 2025-10-28

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Cisco Rv016 Multi Wan Vpn
HW
Cisco
wszystkie wersje
Cisco Rv016 Multi Wan Vpn Firmware
OS
Cisco
< 4.2.3.10
Cisco Rv042 Dual Wan Vpn
HW
Cisco
wszystkie wersje
Cisco Rv042 Dual Wan Vpn Firmware
OS
Cisco
< 4.2.3.10
Cisco Rv042g Dual Gigabit Wan Vpn
HW
Cisco
wszystkie wersje
Cisco Rv042g Dual Gigabit Wan Vpn Firmware
OS
Cisco
< 4.2.3.10
Cisco Rv082 Dual Wan Vpn
HW
Cisco
wszystkie wersje
Cisco Rv082 Dual Wan Vpn Firmware
OS
Cisco
< 4.2.3.10

CISA KEV — detailsi

Vendori: Cisco ↗
Producti: RV Series Routers
Added to KEVi: June 8, 2022
Remediation deadline (US Federal)i: June 22, 2022(overdue)

🔧Advisory Cisco↗🇺🇸CISA KEV (original)↗

Required action (CISA)i

Apply updates per vendor instructions.

CISA descriptioni

A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.

🔴