CVE-2023-20118

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5	Mitigation Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND

cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*

History

12 Mar 2025, 17:15

Type	Values Removed	Values Added
Summary	(en) A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability.	(en) A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]
CPE	cpe:2.3:o:cisco:rv016_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv320_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv042g_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv042g_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv042_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv320_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv042_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv016_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv082_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv325_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv082_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv325_firmware:1.5.1.13:::::::*	cpe:2.3:o:cisco:rv042g_firmware:::::::: cpe:2.3:o:cisco:rv082_firmware:::::::: cpe:2.3:o:cisco:rv042_firmware:::::::: cpe:2.3:o:cisco:rv016_firmware:::::::: cpe:2.3:o:cisco:rv325_firmware:::::::: cpe:2.3:o:cisco:rv320_firmware::::::::
CWE	~~CWE-20~~

21 Nov 2024, 07:40

Type	Values Removed	Values Added
References	~~() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 - Mitigation, Vendor Advisory~~	() https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 - Mitigation, Vendor Advisory
CVSS	v2 : ~~unknown~~ v3 : ~~7.2~~	v2 : unknown v3 : 6.5

21 Apr 2023, 17:04

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-04-13 07:15

Updated : 2025-03-12 17:15

NVD link : CVE-2023-20118

Mitre link : CVE-2023-20118

CVE.ORG link : CVE-2023-20118

JSON object : View

Products Affected

cisco

rv042g
rv320_firmware
rv016_firmware
rv042g_firmware
rv042
rv042_firmware
rv082
rv325_firmware
rv016
rv325
rv320
rv082_firmware

CWE

CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

6.5 /10