peter bassill · operator
$ cve CVE-2023-20118 JSON

CVE-2023-20118 KEV

6.5
MEDIUM · CVSS 3.1 · EPSS 54.1% (pctl 99)

Patch first

On CISA KEV — known exploited in the wild, due 2025-03-24.

Description

A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]

Scoring

CVSS6.5 (MEDIUM, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
EPSS54.11% — more likely to be exploited than 99% of all CVEs
WeaknessCWE-77
On CISA KEVyes — remediate by 2025-03-24
Public exploitnone known
Published2023-04-13
Last modified2026-06-17

CISA KEV

NameCisco Small Business RV Series Routers Command Injection Vulnerability
Added2025-03-03
Due2025-03-24
Vendor / productCisco / Small Business RV Series Routers
Ransomware usenone reported

Affected (12)

VendorProduct
ciscorv016
ciscorv016 firmware
ciscorv042
ciscorv042 firmware
ciscorv042g
ciscorv042g firmware
ciscorv082
ciscorv082 firmware
ciscorv320
ciscorv320 firmware
ciscorv325
ciscorv325 firmware

References

→ the Explorer  ·  watch your stack  ·  NVD