CVE-2014-2178
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.
Vulnerabilidad de CSRF en la interfaz web administrativa en el firmware del router Cisco RV en los dispositivos RV220W , anterior a 1.0.5.9 en los dispositivos RV120W, y anterior a 1.0.4.14 en los dispositivos RV180 y RV180W permite a atacantes remotos secuestrar la autenticación de administradores, también conocido como Bug ID CSCuh87145.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-02-25 CVE Reserved
- 2014-11-06 CVE Published
- 2024-06-19 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-352: Cross-Site Request Forgery (CSRF)
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html | X_refsource_misc |
|
| http://seclists.org/fulldisclosure/2014/Nov/6 | Mailing List |
|
| http://www.securityfocus.com/archive/1/533917/100/0/threaded | Mailing List | |
| http://www.securitytracker.com/id/1031171 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/98498 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv | 2018-10-09 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Rv180 Firmware Search vendor "Cisco" for product "Rv180 Firmware" | <= 1.0.3.10 Search vendor "Cisco" for product "Rv180 Firmware" and version " <= 1.0.3.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv180 Search vendor "Cisco" for product "Rv180" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv180 Firmware Search vendor "Cisco" for product "Rv180 Firmware" | <= 1.0.3.10 Search vendor "Cisco" for product "Rv180 Firmware" and version " <= 1.0.3.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv180w Search vendor "Cisco" for product "Rv180w" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv220w Firmware Search vendor "Cisco" for product "Rv220w Firmware" | <= 1.0.5.8 Search vendor "Cisco" for product "Rv220w Firmware" and version " <= 1.0.5.8" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv220w Search vendor "Cisco" for product "Rv220w" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv120w Firmware Search vendor "Cisco" for product "Rv120w Firmware" | <= 1.0.5.8 Search vendor "Cisco" for product "Rv120w Firmware" and version " <= 1.0.5.8" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv120w Search vendor "Cisco" for product "Rv120w" | - | - |
Affected
|