Cisco RV016 Multi-WAN VPN Firmware vulnerabilities

4 CVEs affecting Cisco RV016 Multi-WAN VPN Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-15957, published 2020-09-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-15271: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability, published 2019-11-26. High severity, CVSS 8.8. Actively exploited: in CISA KEV since 2022-06-08. EPSS: 5.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root…
CVE-2019-15957, published 2020-09-23. High severity, CVSS 7.2. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker with administrative privileges to inject…
CVE-2015-6418, published 2015-12-13. Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days. The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, which makes it easier for remote attackers to determine a TLS…
CVE-2019-15990, published 2019-11-26. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based…