CVE:CVE-2017-3882
CNNVD:CNNVD-201705-222
Cisco CVR100W Wireless-N VPN Router是美国思科（Cisco）公司的一款无线路由器产品。
使用1.0.1.22之前版本固件的Cisco CVR100W Wireless-N VPN Router中的Universal Plug-and-Play (UPnP)实现过程存在缓冲区溢出漏洞，该漏洞源于程序没有对UPnP输入数据执行充分的范围检测。攻击者可通过向侦听端口发送恶意的请求利用该漏洞造成设备重载或以root权限执行任意代码。
solution:Upgrade cisco small_business_rv_router_firmware to a higher version than 1.0.0.30,1.0.1.9,1.0.1.19,1.0.2.6,1.0.3.10,1.0.4.10,1.0.4.14,1.0.5.4,1.0.5.4(gd,1.0.5.5,1.0.5.6,1.0.5.8,1.0.6.6,1.0.39,and avoid the version 1.0.0.30,1.0.1.9,1.0.1.19,1.0.2.6,1.0.3.10,1.0.4.10,1.0.4.14,1.0.5.4,1.0.5.4(gd),1.0.5.5,1.0.5.6,1.0.5.8,1.0.6.6,1.0.39; Upgrade cisco small_business_rv_router_firmware_1.0 to a higher version than 0.2,and avoid the version 0.2