ID:5042 - Exploit for Stack-based buffer overflow in Cisco Systems, Inc products - CVE-2021-1167

 
Main Vulnerability Database Exploits ID:5042 - Exploit for Stack-based buffer overflow in Cisco Systems, Inc products - CVE-2021-1167

ID:5042 - Exploit for Stack-based buffer overflow in Cisco Systems, Inc products - CVE-2021-1167

Published: January 19, 2021


Vulnerability identifier: #VU49615
Vulnerability risk: Low
CVE-ID: CVE-2021-1167
CWE-ID: CWE-121
Exploitation vector: Remote access
Vulnerable software:
RV110W Wireless-N VPN Firewall
Cisco Small Business RV130 Series VPN Routers
RV130W Wireless-N Multifunction VPN Router
RV215W Wireless-N VPN Router

Link to public exploit:


Vulnerability description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error in the web-based management interface. A remote administrator can send specially crafted HTTP requests, trigger stack-based buffer overflow and execute arbitrary code on the target system or cause a denial of service (DoS) condition.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.