description: A vulnerability in the web-based management interface of Cisco Small Business RV042 Series Routers could allow an unauthenticated, remote attacker to bypass authentication on the affected device.
This vulnerability is due to incorrect user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending crafted requests to the web-based management interface. A successful exploit could allow the attacker to gain root privileges on the affected device.
problem types: Using Referer Field for Authentication
affected:
{
vendor: Cisco
product: Cisco Small Business RV Series Router Firmware
versions:
version: 2.0.0.19-tm, status: affected
version: 2.0.2.01-tm, status: affected
version: 1.3.12.19-tm, status: affected
version: 1.3.12.6-tm, status: affected
version: 1.3.13.02-tm, status: affected
version: 1.3.9.8-tm, status: affected
version: 4.0.0.7, status: affected
version: 4.0.2.08-tm, status: affected
version: 4.0.3.03-tm, status: affected
version: 4.0.4.02-tm, status: affected
version: 4.2.1.02, status: affected
version: 4.2.2.08, status: affected
version: 4.2.3.03, status: affected
version: 4.2.3.06, status: affected
version: 4.2.3.07, status: affected
version: 4.2.3.08, status: affected
version: 4.2.3.09, status: affected
version: 4.2.3.10, status: affected
version: 4.2.3.14, status: affected
version: 3.0.0.1-tm, status: affected
version: 3.0.0.19-tm, status: affected
version: 3.0.2.01-tm, status: affected
version: 4.1.1.01, status: affected
version: 4.1.0.02-tm, status: affected
}
metrics:
format: cvssV3_1
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
baseScore: 9
baseSeverity: CRITICAL
attackVector: NETWORK
attackComplexity: HIGH
privilegesRequired: NONE
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
]
exploits: The Cisco PSIRT is aware that proof-of-concept exploit code is available for vulnerabilities CVE-2023-20025 and CVE-2023-20026 that are described in this advisory.
The Cisco PSIRT is not aware of any malicious use of the vulnerabilities that are described in this advisory.