[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fiBgm73s07SEederQ5SyIOKv4StSWnzBAkmpwggd90eg":3,"g5a-ex:cisco\u002Frv110w@*":99,"g5a-family:cisco\u002Frv110w":101},{"success":4,"data":5},true,{"product":6,"versions":14,"topVulnerabilitiesByEpss":15,"kevVulnerabilities":76,"seoMetadata":77,"meta":96},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":13},"cisco","rv110w",0,126,"2023-09-06",[],"Rv110w by Cisco is a technology product and 126 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[],[16,25,32,39,47,53,57,61,66,71],{"cveId":17,"description":18,"publishedDate":19,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":24},"CVE-2019-1663","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.","2019-02-28",9.8,"v3.1","Critical",false,0.95707,{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":31},"CVE-2019-1898","A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to access the syslog file on an affected device. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for the syslog file. A successful exploit could allow the attacker to access the information contained in the file.","2019-06-20",5.3,"Medium",0.40951,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":22,"isKev":23,"epssScore":38},"CVE-2014-0683","The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.","2014-03-06",10,"v2",0.1043,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":23,"epssScore":46},"CVE-2018-0423","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to cause a denial of service condition or to execute arbitrary code. The vulnerability is due to improper boundary restrictions on user-supplied input in the Guest user feature of the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device, triggering a buffer overflow condition. A successful exploit could allow the attacker to cause the device to stop responding, resulting in a denial of service condition, or could allow the attacker to execute arbitrary code.","2018-10-05",8.1,"v3.0","High",0.06765,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":21,"severity":45,"isKev":23,"epssScore":52},"CVE-2021-1167","Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities.","2021-01-13",7.2,0.05628,{"cveId":54,"description":55,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":56},"CVE-2019-1897","A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.",0.04479,{"cveId":58,"description":59,"publishedDate":28,"cvssScore":29,"cvssVersion":21,"severity":30,"isKev":23,"epssScore":60},"CVE-2019-1899","A vulnerability in the web interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to acquire the list of devices that are connected to the guest network. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing a specific URI on the web interface of the router.",0.03376,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":65},"CVE-2021-1459","A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device. Cisco has not released software updates that address this vulnerability.","2021-04-08",0.03023,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":70},"CVE-2022-20825","A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient user input validation of incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface. A successful exploit could allow the attacker to execute arbitrary commands on an affected device using root-level privileges. Cisco has not released software updates that address this vulnerability.","2022-06-15",0.02968,{"cveId":72,"description":73,"publishedDate":74,"cvssScore":20,"cvssVersion":21,"severity":22,"isKev":23,"epssScore":75},"CVE-2020-3144","A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. The vulnerability is due to improper session management on affected devices. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.","2020-07-16",0.02866,[],{"title":78,"metaDescription":79,"keywords":80,"structuredData":81},"Rv110w by Cisco - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Rv110w by Cisco with 126 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Rv110w vulnerabilities, Rv110w security, Rv110w CVE, Cisco Rv110w, Rv110w threat intelligence, Cisco security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":82,"@type":83,"name":84,"description":79,"url":85,"manufacturer":86,"applicationCategory":90,"softwareVersion":91,"mainEntity":92},"https:\u002F\u002Fschema.org","SoftwareApplication","Rv110w","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fcisco\u002Frv110w",{"@type":87,"name":88,"url":89},"Organization","Cisco","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fcisco","Security Software","Multiple versions",{"@type":93,"name":94,"description":95,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Rv110w Security Vulnerabilities","Security vulnerabilities affecting Rv110w by Cisco",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":97,"apiVersion":98},"2026-10-28T15:30:23.999Z","3.0",{"rows":100,"total":9,"capped":23,"failed":9},[],[102,105,108],{"product":103,"cves":104},"rv110w_firmware",128,{"product":106,"cves":107},"rv110w_wireless-n_vpn_firewall",16,{"product":109,"cves":110},"rv110w_wireless-n_vpn_firewall_firmware",12]