{"schemaVersion":3,"id":"CVE-2020-3144","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, RV130 VPN Router, RV130W Wireless-N Multifunction VPN Router, and RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary commands with administrative commands on an affected device. The vulnerability is due to improper session management on affected devices. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected device. A successful exploit could allow the attacker to gain administrative access on the affected device.","dates":{"published":"2020-07-16T17:20:18.344Z","modified":"2024-11-15T16:56:44.240Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.02866,"percentile":0.86583,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.02866},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02866,"percentile":0.86583}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.02866,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.02866,"percentile":0.86583}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-284","name":"Improper Access Control","description":"The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","type":"weakness","status":"Incomplete","abstraction":"Pillar","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/284.html"},{"id":"CWE-287","name":"Improper Authentication","description":"When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","type":"weakness","status":"Draft","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/287.html"}],"affected":[{"vendor":"cisco","product":"cisco rv130w wireless-n multifunction vpn router firmware","name":"Cisco RV130W Wireless-N Multifunction VPN Router Firmware","label":"cisco rv130w wireless-n multifunction vpn router firmware","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"n/a","noFixRecorded":false,"fixedIn":null}],"versionsText":"n/a","eol":null,"hubHref":"/vendor/cisco/cisco_rv130w_wireless-n_multifunction_vpn_router_firmware"},{"vendor":"cisco","product":"rv110w_firmware","name":"rv110w firmware","label":"rv110w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.2.2.8","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.2.2.8","eol":null,"hubHref":"/vendor/cisco/rv110w"},{"vendor":"cisco","product":"rv130_firmware","name":"rv130 firmware","label":"rv130_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.0.3.55","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.3.55","eol":null,"hubHref":"/vendor/cisco/rv130"},{"vendor":"cisco","product":"rv130w_firmware","name":"rv130w firmware","label":"rv130w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.0.3.55","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.0.3.55","eol":null,"hubHref":"/vendor/cisco/rv130w"},{"vendor":"cisco","product":"rv215w_firmware","name":"rv215w firmware","label":"rv215w_firmware","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"< 1.3.1.7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.3.1.7","eol":null,"hubHref":"/vendor/cisco/rv215w"}],"affectedCount":5,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-auth-bypass-cGv9EruZ","label":"tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-auth-bypass-cGv9EruZ","hostname":"tools.cisco.com","tags":["Vendor Advisory","X Refsource CISCO"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-07-16T17:20:18.344Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-11-15T16:56:44.240Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T19:52:38.892Z","stale":false,"partial":false}}