漏洞标题
N/A
漏洞描述信息
Cisco RV132W ADSL2+ Wireless-N VPN路由器和Cisco RV134W VDSL2 Wireless-AC VPN路由器的Web界面的一个漏洞可能导致未验证的远程攻击者查看受影响设备的配置参数，从而泄露机密信息。该漏洞是由于某些页面，它们是Web界面的一部分并包含受影响设备机密信息，缺乏用户身份验证要求。攻击者可以通过向受影响设备发送精心构造的HTTP请求并查看HTTP响应来利用此漏洞。成功利用此漏洞可能导致攻击者查看受影响设备的配置参数，包括管理员密码。Cisco Bug ID: CSCvg92739, CSCvh60172。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172.
CVSS信息
N/A
漏洞类别
信息暴露
漏洞标题
Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers Web界面信息泄露漏洞
漏洞描述信息
Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers都是美国思科（Cisco）公司的路由器。Web interface是其中的一个Web界面。 Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers中的Web界面存在信息泄露漏洞，该漏洞源于程序对某些界面缺少用户身份验证请求。远程攻击者可通过发送特制的请求并检查回复的HTTP响应利
CVSS信息
N/A
漏洞类别
授权问题