Vulnerabilities > External Control of Assumed-Immutable Web Parameter

DATE CVE VULNERABILITY TITLE RISK
2021-02-04 CVE-2021-1295 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1294 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1293 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1292 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1291 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1290 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8
2021-02-04 CVE-2021-1289 External Control of Assumed-Immutable Web Parameter vulnerability in Cisco products
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device.
network
low complexity
cisco CWE-472
critical
9.8