Unscored severity · published Mar 6, 2014
CVE-2014-0683
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware…
–
CVSS
10.6%
EPSS
No
On KEV
Description
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.
Exploitation
Is it being used?
Exploit prediction (EPSS)10.6% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CV
Cvr100w · Cisco
All versions, or not specified · source: NVD
CF
Cvr100w Firmware · Cisco
through 1.0.1.19 · source: NVD
RV
Rv110w · Cisco
All versions, or not specified · source: NVD
RF
Rv110w Firmware · Cisco
through 1.2.0.9 · source: NVD
RV
Rv215w · Cisco
All versions, or not specified · source: NVD
RF
Rv215w Firmware · Cisco
through 1.1.0.5 · source: NVD