CVE-2023-20025
CRITICALCisco Small Business RV016-082 - Auth Bypass
Title source: llmDescription
A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.
Exploits (1)
Scores
CVSS v3
9.0
EPSS
0.0033
EPSS Percentile
56.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Details
CWE
CWE-290
CWE-293
Status
published
Products (4)
cisco/rv016_firmware
cisco/rv042_firmware
cisco/rv042g_firmware
cisco/rv082_firmware
Published
Jan 20, 2023
Tracked Since
Feb 18, 2026