exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Cisco Security Advisory 20160127-rv220

Cisco Security Advisory 20160127-rv220
Posted Jan 28, 2016
Authored by Cisco Systems | Site cisco.com

Cisco Security Advisory - A vulnerability in the web-based management interface of Cisco RV220W Wireless Network Security Firewall devices could allow an unauthenticated, remote attacker to bypass authentication and gain administrative privileges on a targeted device. The vulnerability is due to insufficient input validation of HTTP request headers that are sent to the web-based management interface of an affected device. An unauthenticated, remote attacker could exploit this vulnerability by sending a crafted HTTP request that contains malicious SQL statements to the management interface of a targeted device. Depending on whether remote management is configured for the device, the management interface may use the SQL code in the HTTP request header to determine user privileges for the device. A successful exploit could allow the attacker to bypass authentication on the management interface and gain administrative privileges on the device. Cisco released a firmware update that addresses this vulnerability. There are workarounds that mitigate this vulnerability.

tags | advisory, remote, web
systems | cisco
SHA-256 | 2281b657e0937097f15ae7278e92928c16122d125bc334429f23c131ec767d4d

Cisco Security Advisory 20160127-rv220

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Cisco RV220W Management Authentication Bypass Vulnerability

Advisory ID: cisco-sa-20160127-rv220

Revision 1.0

For Public Release 2016 January 27 16:00 UTC (GMT)

+---------------------------------------------------------------------

Summary
=======

A vulnerability in the web-based management interface of Cisco RV220W
Wireless Network Security Firewall devices could allow an
unauthenticated, remote attacker to bypass authentication and gain
administrative privileges on a targeted device.

The vulnerability is due to insufficient input validation of HTTP
request headers that are sent to the web-based management interface
of an affected device. An unauthenticated, remote attacker could exploit
this vulnerability by sending a crafted HTTP request that contains
malicious SQL statements to the management interface of a targeted
device. Depending on whether remote management is configured for the
device, the management interface may use the SQL code in the HTTP
request header to determine user privileges for the device. A
successful exploit could allow the attacker to bypass authentication
on the management interface and gain administrative privileges on the
device.

Cisco released a firmware update that addresses this vulnerability.
There are workarounds that mitigate this vulnerability.

This advisory is available at the following link:

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (SunOS)
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=x+Kt
-----END PGP SIGNATURE-----
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close