Cisco RV130W Wireless-N Multifunction VPN Router Firmware vulnerabilities

9 CVEs affecting Cisco RV130W Wireless-N Multifunction VPN Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-34730, published 2021-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-34730, published 2021-08-18. Critical severity, CVSS 9.8. EPSS: 18.5% chance of exploitation in the next 30 days. A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2020-3323, published 2020-07-16. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an…
CVE-2016-1395, published 2016-06-19. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. The web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before 1.3.0.8 allows remote…
CVE-2020-3332, published 2020-07-16. High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell…
CVE-2015-6397, published 2016-08-08. High severity, CVSS 8.8. EPSS: 2.3% chance of exploitation in the next 30 days. Cisco RV110W, RV130W, and RV215W devices have an incorrect RBAC configuration for the default account, which allows remote authenticated users to obtain root access via a login session with that…
CVE-2021-1217, published 2021-01-13. High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary…
CVE-2015-6396, published 2016-08-08. High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days. The CLI command parser on Cisco RV110W, RV130W, and RV215W devices allows local users to execute arbitrary shell commands as an administrator via crafted parameters, aka Bug IDs CSCuv90134,…
CVE-2016-1397, published 2016-06-19. Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days. Buffer overflow in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices with firmware before…
CVE-2016-1396, published 2016-06-19. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Cross-site scripting (XSS) vulnerability in the web-based management interface on Cisco RV110W devices with firmware before 1.2.1.7, RV130W devices with firmware before 1.0.3.16, and RV215W devices…