According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by a command shell injection vulnerability in the web-based management interface due to insufficient input validation of user-supplied data. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device in order to execute arbitrary shell commands or scripts with root privileges.

Please see the included Cisco BIDs and Cisco Security Advisory for more information.

Cisco Small Business Routers Command Shell Injection (cisco-sa-cmd-shell-injection-9jOQn9Dy)

high Nessus Plugin ID 139927

No changelogs found