CVE-2014-2179: cisco rv120w_firmware Improper Input Validation

EPSS trend

Probability

1.63%

Chance of exploitation in the next 30 days

Percentile

76%

Versus all other CVEs

30-day change

No change 0.00 pp

From 1.63% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

References

6 links

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rvVendor AdvisoryX Refsource CISCOPatch
packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.htmlX Refsource MISC
seclists.org/fulldisclosure/2014/Nov/6Mailing ListX Refsource FULLDISC
www.securityfocus.com/archive/1/533917/100/0/threadedMailing ListX Refsource BUGTRAQ
exchange.xforce.ibmcloud.com/vulnerabilities/98499VDB EntryX Refsource XF
www.securitytracker.com/id/1031171VDB EntryX Refsource SECTRACK

Related vulnerabilities

HighCVE-2018-0405cisco · cisco rv180w wireless-n multifunction vpn router +2 more8y agoCisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal VulnerabilityA vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to conduct a directory path traversal attack on a targeted device. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location.EPSS2.88%MediumCVE-2015-6358cisco · pvc2300_firmware +23 more9y agocisco pvc2300_firmwareMultiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allows remote attackers to defeat cryptographic protection mechanisms and conduct man-in-the-middle attacks by leveraging knowledge of these certificates and keys from another installation, aka Bug IDs CSCuw46610, CSCuw46620, CSCuw46637, CSCuw46654, CSCuw46665, CSCuw46672, CSCuw46677, CSCuw46682, CSCuw46705, CSCuw46716, CSCuw46979, CSCuw47005, CSCuw47028, CSCuw47040, CSCuw47048, CSCuw47061, CSCuw90860, CSCuw90869, CSCuw90875, CSCuw90881, CSCuw90899, and CSCuw90913.EPSS1.31%CriticalCVE-2014-2177cisco · rv120w_firmware +3 more11y agocisco rv120w_firmwareThe network-diagnostics administration interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote authenticated users to execute arbitrary commands via a crafted HTTP request, aka Bug ID CSCuh87126.EPSS2.58%MediumCVE-2014-2178cisco · rv120w_firmware +3 more11y agocisco rv120w_firmwareCross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.EPSS1.18%

All vulnerabilities inrv120w_firmware rv180_firmware rv180w_firmware rv220w_firmware

CVE-2014-2179: cisco rv120w_firmware Improper Input Validation

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References