{"vulnerability": "CVE-2019-1663", "sightings": [{"uuid": "b9713b5b-cf38-4861-b942-dc52d47bb654", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "exploited", "source": "https://www.exploit-db.com/exploits/47348", "content": "", "creation_timestamp": "2019-09-03T00:00:00.000000Z"}, {"uuid": "5a24b85f-d9e2-4dd3-888d-eb6c5c74d8f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "exploited", "source": "https://www.exploit-db.com/exploits/46705", "content": "", "creation_timestamp": "2019-04-15T00:00:00.000000Z"}, {"uuid": "a9cb2aa2-c490-4409-a337-a7e860aa6458", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "1a0f5934-69a4-43a2-968e-8fa4c1384d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:13.000000Z"}, {"uuid": "e8df76da-ca2d-4710-b98e-210d0218c468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "MISP/a41d8549-5384-5e1a-8c33-bf88e35b5a0a", "content": "", "creation_timestamp": "2025-10-14T10:31:52.000000Z"}, {"uuid": "19a96fd6-d1a3-4694-99a5-54437be3d0f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cve_2019_1663_cisco_rmi_rce.rb", "content": "", "creation_timestamp": "2019-08-30T18:32:25.000000Z"}, {"uuid": "8134f42b-a7e0-4400-b1c9-9a6285c43cb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "Telegram/cHcofYq5yVH7DLc69hIcAd2SE1E77x3v0sMIcSbMCujGDRo", "content": "", "creation_timestamp": "2025-09-03T03:00:07.000000Z"}, {"uuid": "ea77cdbb-c2e6-4386-a870-c89ce8f58932", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/ctinow/8646", "content": "Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers Cisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code. https://threatpost.com/cisco-fixes-critical-flaw-in-wireless-vpn-firewall-routers/142284/", "creation_timestamp": "2019-02-28T15:37:47.000000Z"}, {"uuid": "0f5db4dd-614a-4918-b658-b3bcccaf1af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-16639", "type": "seen", "source": "https://t.me/cvedetector/985", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2019-16639 - Ruijie EG-2000 series Telnet Command Injection\", \n  \"Content\": \"CVE ID : CVE-2019-16639 \nPublished : July 16, 2024, 5:15 p.m. | 16\u00a0minutes ago \nDescription : An issue was found on the Ruijie EG-2000 series gateway. There is a newcli.php API interface without access control, which can allow an attacker (who only has web interface access) to use TELNET commands and/or show admin passwords via the mode_url=exec&command= substring. This affects EG-2000SE EG_RGOS 11.9 B11P1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T19:38:01.000000Z"}, {"uuid": "306bca7d-0dd2-41f5-9f21-4146658a6f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-16638", "type": "seen", "source": "https://t.me/cvedetector/984", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2019-16638 - Ruijie EG-2000 Password Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2019-16638 \nPublished : July 16, 2024, 5:15 p.m. | 16\u00a0minutes ago \nDescription : An issue was found on the Ruijie EG-2000 series gateway. An attacker can easily dump cleartext stored passwords in /data/config.text with simple XORs. This affects EG-2000SE EG_RGOS 11.1(1)B1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T19:38:00.000000Z"}, {"uuid": "0f8f9e27-5934-4f35-bcba-20895ddf3661", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/information_security_channel/25144", "content": "Cisco released security updates for 2 severe vulnerabilities that affected Cisco wireless VPN, Firewall and Cisco Webex Meetings Desktop App. First one is a remote command execution vulnerability that has been marked as \u201cCritical\u201d and another one is local Command Injection Vulnerability which is marked as \u201chigh\u201d severity. Remote Command Execution Vulnerability CVE-2019-1663 affected Cisco [\u2026]\nThe post Cisco Released Security Updates for 2 Vulnerabilities that allows Hackers to Compromise Cisco Wireless Routers (https://gbhackers.com/cisco-released-security-updates-3/) appeared first on GBHackers On Security (https://gbhackers.com/).", "creation_timestamp": "2019-03-01T16:19:36.000000Z"}, {"uuid": "a1565be0-fb1f-4475-bbb2-b7a42e1a78dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/188", "content": "#exploit\n1. CVE-2019-1663:\nA pre-authentication code execution vulnerability in the RV110W/RV130W/RV215W router series\nhttps://www.pentestpartners.com/security-blog/cisco-rv130-its-2019-but-yet-strcpy\n\n2. CVE-2019-6977:\nPHP \"Sandbox\" escape\nhttps://hackerone.com/reports/478368", "creation_timestamp": "2022-12-07T16:08:09.000000Z"}, {"uuid": "428a124d-7aff-425f-b784-c1d9e21e536f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/cibsecurity/2779", "content": "\u274c Cisco Fixes Critical Flaw in Wireless VPN, Firewall Routers \u274c\n\nCisco said that CVE-2019-1663, which has a CVSS score of 9.8, allows unauthenticated, remote attackers to execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"Threatpost | The first stop for security news\".", "creation_timestamp": "2019-02-28T15:31:41.000000Z"}, {"uuid": "df694285-0207-437d-81a1-bb7ba04002f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "Telegram/X7sJ5xTHxbbMwNKhy_MqaFfmqW2hoQyBS_wI7CRCZVKq2rWk", "content": "", "creation_timestamp": "2026-07-17T07:00:04.428371Z"}, {"uuid": "79d59511-a48d-4f89-bdb5-1e10c31e9dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "Telegram/X7sJ5xTHxbbMwNKhy_MqaFfmqW2hoQyBS_wI7CRCZVKq2rWk", "content": "", "creation_timestamp": "2026-07-18T00:00:37.253275Z"}, {"uuid": "7be2eba1-2f6e-4f86-8b0d-1d543b62a9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-01T20:02:47.531584Z"}, {"uuid": "a6af5451-468c-4c04-b3c2-e801feb98dba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-02T01:03:23.781521Z"}, {"uuid": "b992ca19-08f4-4d4f-9650-333d0d3229e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cve_2019_1663_cisco_rmi_rce.rb", "content": "{\"aliases\": [\"exploit/linux/http/cisco_rv130_rmi_rce\"], \"arch\": \"mipsle, armle\", \"author\": [\"Yu Zhang\", \"Haoliang Lu\", \"T. Shiomitsu\", \"Quentin Kaiser \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall,\\n          Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router\\n          could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device.\\n\\n          The vulnerability is due to improper validation of user-supplied data in the web-based management interface.\\n          An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device.\\n\\n          A successful exploit could allow the attacker to execute arbitrary code on the underlying operating\\n          system of the affected device as a high-privilege user.\\n\\n          RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected.\\n          RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected.\\n          RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected.\\n\\n          Note: successful exploitation may not result in a session, and as such,\\n          on_new_session will never repair the HTTP server, leading to a denial-of-service condition.\", \"disclosure_date\": \"2019-02-27\", \"fullname\": \"exploit/linux/http/cve_2019_1663_cisco_rmi_rce\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Cisco RV110W/RV130(W)/RV215W Routers Management Interface Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/exploits/linux/http/cve_2019_1663_cisco_rmi_rce.rb\", \"platform\": \"Linux\", \"post_auth\": false, \"rank\": 400, \"ref_name\": \"linux/http/cve_2019_1663_cisco_rmi_rce\", \"references\": [\"CVE-2019-1663\", \"BID-107185\", \"URL-https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190227-rmi-cmd-ex\", \"URL-https://www.pentestpartners.com/security-blog/cisco-rv130-its-2019-but-yet-strcpy/\"], \"rport\": 443, \"session_types\": false, \"targets\": [\"Cisco RV110W 1.1.0.9\", \"Cisco RV110W 1.2.0.9\", \"Cisco RV110W 1.2.0.10\", \"Cisco RV110W 1.2.1.4\", \"Cisco RV110W 1.2.1.7\", \"Cisco RV130/RV130W < 1.0.3.45\", \"Cisco RV215W 1.1.0.5\", \"Cisco RV215W 1.1.0.6\", \"Cisco RV215W 1.2.0.14\", \"Cisco RV215W 1.2.0.15\", \"Cisco RV215W 1.3.0.7\", \"Cisco RV215W 1.3.0.8\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:29.087438Z"}, {"uuid": "eb64a1b1-1ac9-4b53-8561-8a5e1774d4ca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-08T11:00:05.150059Z"}, {"uuid": "10633a8d-6c16-425c-b8c8-513382a46f93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-1663", "type": "seen", "source": "https://t.me/hacking_Attack/4295", "content": "Black Hat Ethical Hacking\nZero-Day Bug Impacts Problem-Plagued Cisco SOHO Routers\n\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2017/11/black-hat-locks-and-electronics.jpg Zero-Day Bug Impacts Problem-Plagued Cisco SOHO RoutersPost Views: 47 \nstyle=\"display:block\"\n data-ad-client=\"ca-pub-6620833063853657\"\n data-ad-slot=\"8337846400\"\n data-ad-format=\"auto\"\n data-full-width-responsive=\"true\"> \nReading Time: 1 Minute\nCisco Systems said it will not fix a critical vulnerability found in three of its SOHO router models. The bug, rated 9.8 in severity out of 10, could allow unauthenticated remote users to hijack targeted equipment and gain elevated privileges within effected systems.\nThe three Cisco router models (RV110W, RV130, and RV215W) and one VPN firewall device (RV130W) are of varying age and have reached \u201cend of life\u201d and will not be patched, according to Cisco.\n\nThe company is advising customers to replace the equipment.\n\n\u201cCisco\u00a0has not released and will not release software updates to address the vulnerability described in this advisory. The Cisco\u00a0Small Business RV110W, RV130, RV130W, and RV215W Routers have entered the end-of-life process,\u201d the company wrote. The company added no workaround is available either. Buffer Overflow BugIn the Cisco Systems Security Advisory posted Wednesday, the networking giant said the flaw is due to improper validation of user-supplied input in the web-based management interface.\n\n\u201cAn attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device,\u201d Cisco wrote.\n\nWorkaround mitigation options, such as disabling the web-based management interface, are not available. \u201cThe web-based management interface of these devices is available through a local LAN connection, which cannot be disabled, or through the WAN connection if the remote management feature is enabled,\u201d Cisco wrote. \u201c[However by] default, the remote management feature is disabled on these devices,\u201d Cisco wrote.\nSee Also: Fake Netflix App on Google Play Spreads Malware Via WhatsApp Past Router ProblemsEach of the routers (RV110W, RV130 and RV215W) have had a rocky past. In 2019, hackers exploited a similar critical bug (CVE-2019-1663) after a public proof of concept was made available by researchers with Pen Test Partners.\n\nIn its blog post, Pen Test Partners attributed the root cause of 2019 bug to Cisco\u2019s reliance on the use of insecure C programming language, such as strcpy (string copy).\n\nResearcher Treck Zhou, who is credited for finding the 2021 bug, provided no such similar analysis. Unlike the 2019 bug, Cisco said it \u201cis not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.\u201d\nSee Also: Offensive Security Tool: DirDar One More Critical Router BugOn Wednesday, Cisco also warned\u00a0of second critical bug, with a severity rating of 9.8, that impacts its Cisco SD-WAN vManage software. Two additional high-severity bugs were also reported impacting the same Cisco SD-WAN vManage software.\n\n\u201cMultiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system,\u201d Cisco wrote.\n\nEach of these bugs (CVE-2021-1137, CVE-2021-1479, CVE-2021-1480) are separate and cannot and do not need to be chained together. \u201cThe vulnerabilities are not dependent on one another. Exploitation of one of the vulnerabilities is not required to exploit another vulnerability,\u201d Cisco wrote.\n\n[...]", "creation_timestamp": "2026-09-09T00:00:31.944634Z"}]}