CVE-2023-20149
Cisco Small Business RV016, RV042, RV042G, RV082 , RV320, and RV325 Routers Cross-Site Scripting Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. These vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device and then persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. Cisco has not released software updates that address these vulnerabilities.
CVSS Scores
SSVC
- Decision:Track
Timeline
- 2022-10-27 CVE Reserved
- 2023-04-05 CVE Published
- 2024-10-25 CVE Updated
- 2024-10-26 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Cisco Search vendor "Cisco" | Rv016 Firmware Search vendor "Cisco" for product "Rv016 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv016 Search vendor "Cisco" for product "Rv016" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042 Firmware Search vendor "Cisco" for product "Rv042 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042 Search vendor "Cisco" for product "Rv042" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv042g Firmware Search vendor "Cisco" for product "Rv042g Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv042g Search vendor "Cisco" for product "Rv042g" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv082 Firmware Search vendor "Cisco" for product "Rv082 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv082 Search vendor "Cisco" for product "Rv082" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv320 Firmware Search vendor "Cisco" for product "Rv320 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv320 Search vendor "Cisco" for product "Rv320" | - | - |
Safe
|
Cisco Search vendor "Cisco" | Rv325 Firmware Search vendor "Cisco" for product "Rv325 Firmware" | - | - |
Affected
| in | Cisco Search vendor "Cisco" | Rv325 Search vendor "Cisco" for product "Rv325" | - | - |
Safe
|