CVE-2014-0683
Critical
Description
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Cisco Rv110w Firmware
PublishedMar 6, 2014
First seenMar 6, 2014
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco rv110w_firmware | v ≤ 1.2.0.9 | — |
| cisco rv110w | No range specified | — |
| cisco rv215w_firmware | v ≤ 1.1.0.5 | — |
| cisco rv215w | No range specified | — |
| cisco cvr100w_firmware | v ≤ 1.0.1.19 | — |
| cisco cvr100w | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.