CVE-2020-3330
Critical
Description
A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. An attacker could exploit this vulnerability by using this default account to connect to the affected system. A successful exploit could allow the attacker to gain full control of an affected device.
SeverityCritical
CVSS9.8
Exploit probability—
Product
Cisco Rv110w Wireless-n Vpn Firewall Firmware
PublishedJul 16, 2020
First seenJul 16, 2020
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- cisco rv110w_wireless-n_vpn_firewall_firmware1.2.2.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco rv110w_wireless-n_vpn_firewall_firmware | v < 1.2.2.8 | 1.2.2.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.