CVE-2019-1663 (CNNVD-201902-988)
中文标题:
多款Cisco产品缓冲区错误漏洞
英文标题:
Cisco RV110W, RV130W, and RV215W Routers Management Interface Remote Command Execution Vulnerability
漏洞描述
中文描述:
Cisco RV110W Wireless-N VPN Firewall等都是美国思科（Cisco）公司的一款企业级路由器。 Cisco?RV110W Wireless-N VPN Firewall、RV130W Wireless-N Multifunction VPN Router和RV215W Wireless-N VPN Router中基于Web的管理界面存在缓冲区错误漏洞，该漏洞源于程序没有正确地验证用户提交的数据。远程攻击者可通过发送恶意的HTTP请求利用该漏洞在底层操作系统上执行任意代码。
英文描述:
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Cisco | RV110W Wireless-N VPN Firewall | - | < 1.2.2.1 | - |
cpe:2.3:a:cisco:rv110w_wireless-n_vpn_firewall:*:*:*:*:*:*:*:*
|
| Cisco | RV130W Wireless-N Multifunction VPN Router | - | < 1.0.3.45 | - |
cpe:2.3:a:cisco:rv130w_wireless-n_multifunction_vpn_router:*:*:*:*:*:*:*:*
|
| Cisco | RV215W Wireless-N VPN Router | - | < 1.3.1.1 | - |
cpe:2.3:a:cisco:rv215w_wireless-n_vpn_router:*:*:*:*:*:*:*:*
|
| cisco | rv110w_firmware | * | - | - |
cpe:2.3:o:cisco:rv110w_firmware:*:*:*:*:*:*:*:*
|
| cisco | rv130w_firmware | * | - | - |
cpe:2.3:o:cisco:rv130w_firmware:*:*:*:*:*:*:*:*
|
| cisco | rv215w_firmware | * | - | - |
cpe:2.3:o:cisco:rv215w_firmware:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
参考链接
cve.org
cve.org
cve.org
cve.org
cve.org
cve.org
cve.org
exploitdb
exploitdb
cve.org
exploitdb
exploitdb
exploitdb
exploitdb
CVSS评分详情
3.0 (cna)
CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2019-1663 |
2025-11-11 15:20:08 | 2025-11-11 07:35:37 |
| NVD | nvd_CVE-2019-1663 |
2025-11-11 14:56:20 | 2025-11-11 07:44:08 |
| CNNVD | cnnvd_CNNVD-201902-988 |
2025-11-11 15:10:10 | 2025-11-11 07:54:21 |
| EXPLOITDB | exploitdb_EDB-46705 |
2025-11-11 15:05:22 | 2025-11-11 08:51:06 |
| EXPLOITDB | exploitdb_EDB-46961 |
2025-11-11 15:05:22 | 2025-11-11 08:51:31 |
| EXPLOITDB | exploitdb_EDB-47348 |
2025-11-11 15:05:22 | 2025-11-11 08:52:06 |
版本与语言
安全公告
变更历史
查看详细变更
- references_count: 12 -> 14
查看详细变更
- references_count: 10 -> 12
- tags_count: 3 -> 4
查看详细变更
- references_count: 7 -> 10
- tags_count: 0 -> 3
- data_sources: ['cnnvd', 'cve', 'nvd'] -> ['cnnvd', 'cve', 'exploitdb', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 缓冲区错误
- cnnvd_id: 未提取 -> CNNVD-201902-988
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 3 -> 6
- data_sources: ['cve'] -> ['cve', 'nvd']