CVE-2023-20118
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.
This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.
Cisco has not and will not release software updates that address this vulnerability.
CVSS Scores
SSVC
- Decision:Track*
Timeline
- 2022-10-27 CVE Reserved
- 2023-04-05 CVE Published
- 2024-10-26 EPSS Updated
- 2024-10-28 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
- CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Rv016 Firmware Search vendor "Cisco" for product "Rv016 Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv016 Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv016 Search vendor "Cisco" for product "Rv016" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv016 Firmware Search vendor "Cisco" for product "Rv016 Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv016 Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv016 Search vendor "Cisco" for product "Rv016" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042 Firmware Search vendor "Cisco" for product "Rv042 Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv042 Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042 Search vendor "Cisco" for product "Rv042" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042 Firmware Search vendor "Cisco" for product "Rv042 Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv042 Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042 Search vendor "Cisco" for product "Rv042" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042g Firmware Search vendor "Cisco" for product "Rv042g Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv042g Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042g Search vendor "Cisco" for product "Rv042g" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042g Firmware Search vendor "Cisco" for product "Rv042g Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv042g Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042g Search vendor "Cisco" for product "Rv042g" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv082 Firmware Search vendor "Cisco" for product "Rv082 Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv082 Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv082 Search vendor "Cisco" for product "Rv082" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv082 Firmware Search vendor "Cisco" for product "Rv082 Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv082 Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv082 Search vendor "Cisco" for product "Rv082" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv320 Firmware Search vendor "Cisco" for product "Rv320 Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv320 Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv320 Search vendor "Cisco" for product "Rv320" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv320 Firmware Search vendor "Cisco" for product "Rv320 Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv320 Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv320 Search vendor "Cisco" for product "Rv320" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv325 Firmware Search vendor "Cisco" for product "Rv325 Firmware" | 1.5.1.13 Search vendor "Cisco" for product "Rv325 Firmware" and version "1.5.1.13" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv325 Search vendor "Cisco" for product "Rv325" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv325 Firmware Search vendor "Cisco" for product "Rv325 Firmware" | 4.2.3.08 Search vendor "Cisco" for product "Rv325 Firmware" and version "4.2.3.08" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv325 Search vendor "Cisco" for product "Rv325" | - | - |
Safe
|