CVE-2019-1663
CRITICAL EXPLOITEDCisco RV110W RV130W RV215W - Unauthenticated Remote Code Execution via Web Management Interface
Title source: llmExploitation Summary
CVE-2019-1663 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 7 public exploits from researchers including Metasploit, @0x00string, KylVGoi, including a Metasploit module exploits/linux/http/cve_2019_1663_cisco_rmi_rce.
AI-analyzed exploit summary This Metasploit module exploits a remote command execution vulnerability in Cisco RV110W/RV130(W)/RV215W routers by sending malicious HTTP requests to the web-based management interface, leveraging improper input validation to achieve arbitrary code execution with high privileges.
Description
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.
Exploits (7)
This Metasploit module exploits a remote command execution vulnerability in Cisco RV110W/RV130(W)/RV215W routers by sending malicious HTTP requests to the web-based management interface, leveraging improper input validation to achieve arbitrary code execution with high privileges.
This Metasploit module exploits CVE-2019-1663, a remote command execution vulnerability in Cisco RV130W routers due to improper validation in the web-based management interface. It leverages a buffer overflow in the login.cgi endpoint to execute arbitrary commands with high privileges.
This exploit leverages a stack-based buffer overflow in Cisco RV130W routers (CVE-2019-1663) to achieve remote code execution via a crafted POST request to the login.cgi endpoint. The payload uses ROP gadgets to bypass DEP and execute an arbitrary command (ping in this case).
This repository contains a functional exploit for CVE-2019-1663, a stack-based buffer overflow in Cisco RV110W, RV130W, and RV215W routers. The exploit leverages a crafted HTTP POST request to achieve unauthenticated remote code execution via ROP gadgets on ARM architecture.
This repository contains a functional exploit for CVE-2019-1663, a buffer overflow vulnerability in Cisco routers caused by improper use of the `strcpy` function. The exploit includes a Python script that crafts a malicious payload to achieve remote code execution (RCE) on vulnerable devices.
The repository contains only a README with minimal information about CVE-2019-1663, mentioning affected Cisco router models but no technical details, exploit code, or analysis. It appears to be a placeholder for research that was never completed or published.
This Metasploit module exploits CVE-2019-1663, a remote command execution vulnerability in Cisco RV110W/RV130(W)/RV215W routers due to improper validation of user-supplied data in the web-based management interface. It leverages a buffer overflow to execute arbitrary code with high privileges.
References (7)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H