Cisco Small Business RV Series Routers Command Injection Vulnerability

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject arbitrary commands into the underlying operating system and execute them using root-level privileges. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending malicious input to a specific field in the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system as a user with root-level privileges.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

输入验证不恰当

Cisco Small Business RV Series Routers 操作系统命令注入漏洞

Cisco Small Business RV Series Routers是美国思科（Cisco）公司的一款RV系列路由器。 Cisco Small Business RV Series Routers 存在操作系统命令注入漏洞，该漏洞源于基于 Web 的管理界面中存在一个漏洞，该漏洞可能允许具有管理权限的经过身份验证的远程攻击者将任意命令注入底层操作系统并使用root级别权限执行它们。

N/A

N/A