1. Home
  2. CVE Database
  3. CVE-2020-3277
HIGH · 7.2

CVE-2020-3277

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authentica...

Vulnerability Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary commands on an affected device. The vulnerabilities exist because the web-based management interface does not properly validate user-supplied input to scripts. An attacker with administrative privileges that are sufficient to log in to the web-based management interface could exploit each vulnerability by sending malicious requests to an affected device. A successful exploit could allow the attacker to execute arbitrary commands with root privileges on the underlying operating system.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoRv016 Firmware<= 4.2.3.10
CiscoRv016-
CiscoRv042 Firmware<= 4.2.3.10
CiscoRv042-
CiscoRv042G Firmware<= 4.2.3.10
CiscoRv042G-
CiscoRv082 Firmware<= 4.2.3.10
CiscoRv082-
CiscoRv320 Firmware<= 1.5.1.05
CiscoRv320-
CiscoRv325 Firmware<= 1.5.1.05
CiscoRv325-

Related Weaknesses (CWE)

CWE-78CWE-77

References

FAQ

What is CVE-2020-3277?

CVE-2020-3277 is a vulnerability with a CVSS score of 7.2 (HIGH). Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authentica...

How severe is CVE-2020-3277?

CVE-2020-3277 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-3277?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Rv016 Firmware, Cisco Rv016, Cisco Rv042 Firmware, Cisco Rv042, Cisco Rv042G Firmware.