Cisco RV130W Firmware vulnerabilities

131 CVEs affecting Cisco RV130W Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-24700, published 2026-07-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-1663, published 2019-02-28. Critical severity, CVSS 9.8. EPSS: 95.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…
CVE-2019-1898, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 41.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The…
CVE-2018-0423, published 2018-10-05. High severity, CVSS 8.1. EPSS: 6.8% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…
CVE-2018-0426, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 6.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…
CVE-2021-1167, published 2021-01-13. High severity, CVSS 7.2. EPSS: 5.9% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2019-1897, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 4.5% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest…
CVE-2018-0424, published 2018-10-05. High severity, CVSS 8.8. EPSS: 4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…
CVE-2018-0425, published 2018-10-05. Critical severity, CVSS 9.8. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow…
CVE-2019-1899, published 2019-06-20. Medium severity, CVSS 5.3. EPSS: 3.4% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest…
CVE-2022-20825, published 2022-06-15. Critical severity, CVSS 9.8. EPSS: 3.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or…

Latest

CVE-2026-24700, published 2026-07-08. High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The…
CVE-2026-24699, published 2026-07-08. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in the sub_34984() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The…
CVE-2026-24698, published 2026-07-08. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in the save_syslog_to_file() function of the "httpd" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 /…
CVE-2026-24697, published 2026-07-08. High severity, CVSS 7.2. EPSS: 1.5% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in the start_bonjour() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The…
CVE-2023-20250, published 2023-09-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code on an…
CVE-2022-20923, published 2022-09-08. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the IPSec VPN Server authentication functionality of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to bypass…
CVE-2022-20912, published 2022-07-22. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2022-20911, published 2022-07-22. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2022-20910, published 2022-07-22. High severity, CVSS 7.2. EPSS: 1.2% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2022-20904, published 2022-07-22. High severity, CVSS 7.2. EPSS: 1.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…