CVE-2023-20250

Summary

CVE-2023-20250 is a vulnerability affecting the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. This issue permits authenticated, remote attackers to execute arbitrary code on vulnerable devices due to insufficient request validation. A maliciously crafted request sent to the web-interface can be exploited to achieve root-level code execution. Successful exploitation requires the attacker to have valid Administrator credentials on the targeted router.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.