Cisco RV180 VPN Router Firmware vulnerabilities

2 CVEs affecting Cisco RV180 VPN Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-1430, published 2016-08-08.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-1429, published 2016-08-08. High severity, CVSS 7.5. EPSS: 7.4% chance of exploitation in the next 30 days. Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuz43023.
• CVE-2016-1430, published 2016-08-08. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. Cisco RV180 and RV180W devices allow remote authenticated users to execute arbitrary commands as root via a crafted HTTP request, aka Bug ID CSCuz48592.