CVE-2014-2179
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.
El firmware del router Cisco RV en los dispositivos RV220W, anterior a 1.0.5.9 en los dispositivos RV120W, y anterior a 1.0.4.14 en los dispositivos RV180 y RV180W permite a atacantes remotos subir ficheros a localizaciones arbitrarias a través de una solicitud HTTP manipulada, también conocido como Bug ID CSCuh86998.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-02-25 CVE Reserved
- 2014-11-06 CVE Published
- 2024-06-19 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html | X_refsource_misc |
|
| http://seclists.org/fulldisclosure/2014/Nov/6 | Mailing List |
|
| http://www.securityfocus.com/archive/1/533917/100/0/threaded | Mailing List | |
| http://www.securitytracker.com/id/1031171 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/98499 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv | 2018-10-09 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Rv180 Firmware Search vendor "Cisco" for product "Rv180 Firmware" | <= 1.0.3.10 Search vendor "Cisco" for product "Rv180 Firmware" and version " <= 1.0.3.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv180 Search vendor "Cisco" for product "Rv180" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv180 Firmware Search vendor "Cisco" for product "Rv180 Firmware" | <= 1.0.3.10 Search vendor "Cisco" for product "Rv180 Firmware" and version " <= 1.0.3.10" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv180w Search vendor "Cisco" for product "Rv180w" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv120w Firmware Search vendor "Cisco" for product "Rv120w Firmware" | <= 1.0.5.8 Search vendor "Cisco" for product "Rv120w Firmware" and version " <= 1.0.5.8" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv120w Search vendor "Cisco" for product "Rv120w" | - | - |
Affected
|
| Cisco Search vendor "Cisco" | Rv220w Firmware Search vendor "Cisco" for product "Rv220w Firmware" | <= 1.0.5.8 Search vendor "Cisco" for product "Rv220w Firmware" and version " <= 1.0.5.8" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv220w Search vendor "Cisco" for product "Rv220w" | - | - |
Affected
|