Monday, November 4, 2024
HomeCVE/vulnerabilityCritical Cisco Security Flaws Allow Complete Router Firewall Takeover

Critical Cisco Security Flaws Allow Complete Router Firewall Takeover

Published on

Malware protection

Cisco patched critical vulnerabilities with Cisco Small Business that allows a remote attacker to take full control of the high-privileged account. Also fixed a privilege escalation vulnerability that impacts Cisco Prime License Manager (PLM) Software.

The patch covers 5 critical vulnerabilities other 22 high and medium severity security vulnerabilities impacting several routers, WebEx, Cisco SD-WAN Solution Software versions and other software.

All the 5 critical vulnerabilities rated 9.8 out of 10 CVSS base score, Following are the critical vulnerabilities.

- Advertisement - SIEM as a Service

CVE-2020-3330

The vulnerability is in Cisco Small Business RV110W Wireless-N VPN Firewall Routers, it exists because of a default system account with a static password. By exploiting the device attacker can take complete control over the affected system.

CVE-2020-3323

The vulnerability resides in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. The vulnerability is due to improper validation of user-supplied input in the web-based management interface.

CVE-2020-3144

A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router.

The vulnerability is due to improper session management, successful exploitation allows an attacker to execute arbitrary code as the root user on the vulnerability.

CVE-2020-3331

The web-based management interface of the Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.

The vulnerability is due to improper validation of user-supplied input in the web-based management interface.

CVE-2020-3140

The vulnerability resides with the web management interface of Cisco Prime License Manager (PLM) Software could allow an unauthenticated, remote attacker to gain unauthorized access to an affected device.

The vulnerability is due to improper validation of user-supplied input in the web-based management interface.

Cisco patch covers all the 27 vulnerabilities including the critical, high, and medium severity security vulnerabilities impacting several routers, WebEx, Cisco SD-WAN Solution Software versions, and other software.

You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.

Also Read

Cisco Webex Meetings for Windows Let Hackers Gain Access to Sensitive Data

Critical Flaw in Cisco IOS Routers Let Remote Hackers Take Complete Control of the Systems

Cyber Threat Actors Hacked Cisco Servers by Exploiting SaltStack Vulnerabilities

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Evasive Panda Attacking Cloud Services To Steal Data Using New Toolkit

The Evasive Panda group deployed a new C# framework named CloudScout to target a...

Massive Midnight Blizzard Phishing Attack Using Weaponized RDP Files

Researchers warn of ongoing spear-phishing attacks by Russian threat actor Midnight Blizzard targeting individuals...

Sophisticated Phishing Attack Targeting Ukraine Military Sectors

The Ukrainian Cyber Emergency Response Team discovered a targeted phishing campaign launched by UAC-0215...

Chinese Hackers Attacking Microsoft Customers With Sophisticated Password Spray Attacks

Researchers have identified a network of compromised devices, CovertNetwork-1658, used by Chinese threat actors...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

A Massive Hacking Toolkit From “You Dun” Threat Group Developed To Lauch Massive Cyber Attack

The "You Dun" hacking group exploited vulnerable Zhiyuan OA software using SQL injection, leveraging...

Okta Verify Agent for Windows Flaw Let Attackers Steal User Passwords

A newly discovered vulnerability in Okta's Device Access features for Windows could allow attackers...

MediaTek High Severity Vulnerabilities Let Attackers Escalate Privileges

In its recent MediaTek Product Security Bulletin, the chipmaker disclosed two high-severity security vulnerabilities...