Cisco Multiple Products HTTP Request Validation Vulnerability

Last Update Date: 28 Jan 2016 09:44 Release Date: 28 Jan 2016 3606 Views

RISK: Medium Risk

TYPE: Operating Systems - Networks OS

A vulnerability has been identified in the web-based management interface of Cisco RV220W Wireless Network Security Firewall devices. Exploitation of this vulnerability could allow a remote attacker to take control of an affected device.

Impact

Remote Code Execution

System / Technologies affected

RV220W Wireless Network Security Firewall

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

The vendor has issued a fix:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160127-rv220

Vulnerability Identifier

No CVE information is available

Source

US-CERT