CVE-2014-2179

Cisco RV120W < 1.0.5.8, RV180 < 1.0.3.10, RV180W < 1.0.3.10, RV220W < 1.0.5.8 - Arbitrary File Write via HTTP Request

Title source: llm

Description

The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.

References (6)

Core 6

Core References

Patch, Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv

Exploit, Third Party Advisory x_refsource_misc

http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html

Mailing List mailing-list x_refsource_fulldisc

http://seclists.org/fulldisclosure/2014/Nov/6

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/533917/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/98499

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1031171

Scores

EPSS 0.0163

EPSS Percentile 73.3%

Details

CWE

CWE-20

Status published

Products (7)

cisco/rv120w

cisco/rv120w_firmware < 1.0.5.8

cisco/rv180

cisco/rv180_firmware < 1.0.3.10

cisco/rv180w

cisco/rv220w

cisco/rv220w_firmware < 1.0.5.8

Published Nov 07, 2014

Tracked Since Feb 18, 2026