← Back

CVE-2014-2177

nvd nist
Published: Nov 7, 2014Modified: May 6, 2026

JSON object

Loading...
9.0
Vector
AV:N/AC:L/Au:S/C:C/I:C/A:C
Exploitability: 8.0 / Impact: 10.0
Source: NVD

Description

The network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCuh87126.

Affected (7)

Cisco
7 products
Rv120w Firmware
Rv120w
Rv220w Firmware
Rv220w
Rv180 Firmware
Rv180
Rv180w
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Rv120w Firmware
Up to 1.0.5.8
Rv120w
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Rv220w Firmware
Up to 1.0.5.8
Rv220w
All versions
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Rv180 Firmware
Up to 1.0.3.10
Rv180
All versions
Rv180w
All versions

Related CWEs

CWE-94
Improper Control of Generation of Code ('Code Injection')
The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (12)

Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
PatchVendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.