medium5.3
CVE-2019-15990
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view…
Impact
A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cisco | Rv016 Multi-Wan Vpn Firmware | before 4.2.3.10 |
| Cisco | Rv042 Dual Wan Vpn Firmware | before 4.2.3.10 |
| Cisco | Rv042g Dual Gigabit Wan Vpn Firmware | before 4.2.3.10 |
| Cisco | Rv082 Dual Wan Vpn Firmware | before 4.2.3.10 |