CVE-2019-1652Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability

Descripción

A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. The vulnerability is due to improper validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious HTTP POST requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux shell as root. Cisco has released firmware updates that address this vulnerability.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• 20190123 Cisco Small Business RV320 and RV325 Routers Command Injection Vulnerability vendor-advisoryVendor Advisory
• 46243 exploitExploitThird Party AdvisoryVDB Entry
• 106728 vdb-entryThird Party AdvisoryVDB Entry
• 20190327 [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval mailing-listExploitMailing ListThird Party Advisory
• 20190327 [RT-SA-2019-005] Cisco RV320 Command Injection Retrieval mailing-listExploitMailing ListThird Party Advisory
• http://packetstormsecurity.com/files/152262/Cisco-RV320-Command-Injection.html ExploitThird Party AdvisoryVDB Entry
• http://packetstormsecurity.com/files/152305/Cisco-RV320-RV325-Unauthenticated-Remote-Code-Execution.html Third Party AdvisoryVDB Entry
• 46655 exploitExploitThird Party AdvisoryVDB Entry
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1652 US Government Resource