CVE-2019-1897

Medium

Description

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.

SeverityMedium
CVSS5.3
Exploit probability—
ProductCisco Rv110w Firmware
PublishedJun 20, 2019
First seenJun 20, 2019
Weakness typeCWE-285CWE-285

How to fix

Affected products

ProductAffected versionsFixed in
cisco rv110w_firmwareNo range specified—
cisco rv130w_firmwareNo range specified—
cisco rv215w_firmwareNo range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.