Vulnerability \Advisory – Multiple Cisco Devices

by taranis

Advisory ID: BGD-2019-0007

Version: 1.00

Probability: high

CVE ID: CVE-2019-1663

Damage: high

Publication date: 2019-03-12

Description: A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

Impact: A remote attacker could exploit this vulnerability to take control of an affected system.

Product(s) affected:

• adobe Adobe PHP SDK
• cisco AS5400HPX Universal Gateway

Platform(s) affected:

• Vulnerable:
• Cisco Small Business RV Series Routers 1.3.0.8
• Cisco Small Business RV Series Routers 1.2.1.7
• Cisco Small Business RV Series Routers 1.0.1.2
• Cisco RV215W Wireless-N VPN Router 0
• Cisco RV130W Wireless-N Multifunction VPN Router 0
• Cisco RV110W Wireless-N VPN Firewall 0
• Not Vulnerable:
• Cisco Small Business RV Series Routers 1.3.1.1
• Cisco Small Business RV Series Routers 1.2.2.1
• Cisco Small Business RV Series Routers 1.0.3.45
• Cisco RV215W Wireless-N VPN Router 1.3.1.1
• Cisco RV130W Wireless-N Multifunction VPN Router 1.0.3.45
• Cisco RV110W Wireless-N VPN Firewall 1.2.2.1

Mitigation: Administrators are advised to update the affected systems without delay.
Updates are available. Please see the references or vendor advisory for more information.
\updat eto version
cpe:2.3:o:cisco:rv110w_firmware:*:*:*:*:*:*:

Reference URL’s:

• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-1663
• http://www.securityfocus.com/bid/107185
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-rmi-cmd-ex

taranis