Cisco RV110W Wireless-N VPN Firewall Firmware vulnerabilities

12 CVEs affecting Cisco RV110W Wireless-N VPN Firewall Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34730, published 2021-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3331, published 2020-07-16. Critical severity, CVSS 9.8. EPSS: 41.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute…
CVE-2021-34730, published 2021-08-18. Critical severity, CVSS 9.8. EPSS: 18.5% chance of exploitation in the next 30 days. A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2020-3323, published 2020-07-16. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an…
CVE-2016-1395, published 2016-06-19. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote…
CVE-2020-3330, published 2020-07-16. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a…
CVE-2020-3332, published 2020-07-16. High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell…
CVE-2020-3146, published 2020-07-16. High severity, CVSS 8.8. EPSS: 2.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN…
CVE-2015-6397, published 2016-08-08. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that…
CVE-2021-1217, published 2021-01-13. High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2015-6396, published 2016-08-08. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134,…

Latest

CVE-2016-1397, published 2016-06-19. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before…