CVE-2018-0425: cisco cisco rv130w wireless-n multifunction vpn router firmware
Vulnerability summary
CVE-2018-0425 is a critical (CVSS 9.8) vulnerability in cisco cisco rv130w wireless-n multifunction vpn router firmware. EPSS estimates a 3.41% chance of exploitation in the next 30 days, higher than 88.7% of scored vulnerabilities.
Timeline
- 05-10-2018PublishedVulnerability first disclosed.
- 26-11-2024Last modifiedVulnerability information updated.
Description
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper access control to files within the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to a targeted device. A successful exploit could allow the attacker to gain access to sensitive configuration information, including user authentication credentials.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.41%
Chance of exploitation in the next 30 days
Percentile
89%
Versus all other CVEs
30-day change
0.00 pp
From 3.41% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root cause- CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
- CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Affected systems
Cisco4 products
- cisco rv130w wireless-n multifunction vpn router firmwaren/a
- rv110w_firmware≤ 1.2.1.7
- rv130w_firmware< 1.0.3.44
- rv215w_firmware≤ 1.3.0.8
1 vendor · 4 products