← Back

CVE-2014-2178

nvd nist
Published: Nov 7, 2014Modified: May 6, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Affected (7)

Cisco
7 products
Rv180 Firmware
Rv180
Rv180w
Rv220w Firmware
Rv220w
Rv120w Firmware
Rv120w
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Rv180 Firmware
Up to 1.0.3.10
Rv180
All versions
Rv180w
All versions
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Rv220w Firmware
Up to 1.0.5.8
Rv220w
All versions
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Rv120w Firmware
Up to 1.0.5.8
Rv120w
All versions

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (12)

Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
PatchVendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.