漏洞标题
N/A
漏洞描述信息
Cisco Small Business RV160和 RV260 系列 VPN 路由器的基于 Web 的管理界面的一个漏洞可能允许已验证的远程攻击者执行受影响设备底层操作系统的任意命令。这个漏洞是因为对用户输入的验证不足。攻击者可以通过向受影响设备基于 Web 的管理界面发送精心构造的请求来利用此漏洞。一个成功的利用可能允许攻击者使用根权限在受影响设备上执行任意命令。要利用此漏洞，攻击者必须在受影响设备上拥有有效的管理员权限。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
A vulnerability in the web-based management interface of Cisco Small Business RV160 and RV260 Series VPN Routers could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by sending a crafted request to the web-based management interface of an affected device. A successful exploit could allow the attacker to execute arbitrary commands using root-level privileges on the affected device. To exploit this vulnerability, the attacker must have valid Administrator-level credentials on the affected device.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
漏洞类别
在命令中使用的特殊元素转义处理不恰当(命令注入)
漏洞标题
Cisco RV160和RV260 输入验证错误漏洞
漏洞描述信息
Cisco Small Business是美国思科（Cisco）公司的一个交换机。 Cisco Small Business RV160、RV260 Series VPN Routers存在安全漏洞，该漏洞源于对用户输入验证不足。攻击者利用该漏洞可以执行任意命令。
CVSS信息
N/A
漏洞类别
输入验证错误