Description (CNA)
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by persuading a user to visit specific web pages that include malicious payloads. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Cisco / Cisco Small Business RV Series Router Firmware | affected 1.1.0.09; affected 1.1.1.19; affected 1.1.1.06; affected 1.2.1.14; affected 2.0.0.19-tm; affected 1.3.1.12; affected 1.3.1.10; affected 1.3.12.6-tm; affected 1.3.13.02-tm; affected 4.0.0.7; affected 4.0.2.08-tm; affected 4.0.3.03-tm; affected 4.0.4.02-tm; affected 4.2.2.08; affected 4.2.3.03; affected 4.2.3.06; affected 4.2.3.07; affected 4.2.3.09; affected 4.2.3.10; affected 4.2.3.14; affected 1.4.2.15; affected 1.4.2.17; affected 1.4.2.19; affected 1.4.2.22; affected 3.0.0.1-tm; affected 4.1.1.01; affected 1.5.1.05 |
CWE
CWE-80
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.