cnvd - cnvd-2018-05553

cnvd-2018-05553

Vulnerability from cnvd

Title: 多个Cisco Wireless VPN Routers信息泄露漏洞

Description:

Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers都是美国思科（Cisco）公司的路由器。Web interface是其中的一个Web界面。

Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers中的Web界面存在信息泄露漏洞，该漏洞源于程序对某些界面缺少用户身份验证请求。远程攻击者可通过发送特制的请求并检查回复的HTTP响应利用该漏洞查看配置参数（包括：管理员密码）。

Severity: 中

Patch Name: 多个Cisco Wireless VPN Routers信息泄露漏洞的补丁

Patch Description:

Cisco RV132W ADSL2+ Wireless-N VPN和RV134W VDSL2 Wireless-AC VPN Routers都是美国思科（Cisco）公司的路由器。Web interface是其中的一个Web界面。

Formal description:

用户可联系供应商获得补丁信息： https://www.cisco.com/

Reference: https://securitytracker.com/id/1040345

Impacted products

Name
['Cisco RV134W 1.0.0.1', 'Cisco RV134W 1.0.1.8']

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "102969"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2018-0127"
    }
  },
  "description": "Cisco RV132W ADSL2+ Wireless-N VPN\u548cRV134W VDSL2 Wireless-AC VPN Routers\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u8def\u7531\u5668\u3002Web interface\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u754c\u9762\u3002\r\n\r\nCisco RV132W ADSL2+ Wireless-N VPN\u548cRV134W VDSL2 Wireless-AC VPN Routers\u4e2d\u7684Web\u754c\u9762\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9\u67d0\u4e9b\u754c\u9762\u7f3a\u5c11\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u8bf7\u6c42\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5e76\u68c0\u67e5\u56de\u590d\u7684HTTP\u54cd\u5e94\u5229\u7528\u8be5\u6f0f\u6d1e\u67e5\u770b\u914d\u7f6e\u53c2\u6570\uff08\u5305\u62ec\uff1a\u7ba1\u7406\u5458\u5bc6\u7801\uff09\u3002",
  "discovererName": "Cisco",
  "formalWay": "\u7528\u6237\u53ef\u8054\u7cfb\u4f9b\u5e94\u5546\u83b7\u5f97\u8865\u4e01\u4fe1\u606f\uff1a\r\nhttps://www.cisco.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-05553",
  "openTime": "2018-03-19",
  "patchDescription": "Cisco RV132W ADSL2+ Wireless-N VPN\u548cRV134W VDSL2 Wireless-AC VPN Routers\u90fd\u662f\u7f8e\u56fd\u601d\u79d1\uff08Cisco\uff09\u516c\u53f8\u7684\u8def\u7531\u5668\u3002Web interface\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u754c\u9762\u3002\r\n\r\nCisco RV132W ADSL2+ Wireless-N VPN\u548cRV134W VDSL2 Wireless-AC VPN Routers\u4e2d\u7684Web\u754c\u9762\u5b58\u5728\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u6e90\u4e8e\u7a0b\u5e8f\u5bf9\u67d0\u4e9b\u754c\u9762\u7f3a\u5c11\u7528\u6237\u8eab\u4efd\u9a8c\u8bc1\u8bf7\u6c42\u3002\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u7279\u5236\u7684\u8bf7\u6c42\u5e76\u68c0\u67e5\u56de\u590d\u7684HTTP\u54cd\u5e94\u5229\u7528\u8be5\u6f0f\u6d1e\u67e5\u770b\u914d\u7f6e\u53c2\u6570\uff08\u5305\u62ec\uff1a\u7ba1\u7406\u5458\u5bc6\u7801\uff09\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u4e2aCisco Wireless VPN Routers\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Cisco RV134W 1.0.0.1",
      "Cisco RV134W 1.0.1.8"
    ]
  },
  "referenceLink": "https://securitytracker.com/id/1040345",
  "serverity": "\u4e2d",
  "submitTime": "2018-02-08",
  "title": "\u591a\u4e2aCisco Wireless VPN Routers\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e"
}

CVE-2018-0127 (GCVE-0-2018-0127)

Vulnerability from cvelistv5

Published

2018-02-08 07:00

Modified

2024-12-02 21:10

Severity ?

CWE

CWE-200

Summary

A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172.

References

▼	URL	Tags
	http://www.securitytracker.com/id/1040345	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/102969	vdb-entry, x_refsource_BID
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	Cisco RV132W and RV134W Wireless VPN Routers	Version: Cisco RV132W and RV134W Wireless VPN Routers

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T03:14:16.884Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "1040345",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1040345"
          },
          {
            "name": "102969",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/102969"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2018-0127",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-12-02T19:24:13.700218Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2024-12-02T21:10:21.596Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Cisco RV132W and RV134W Wireless VPN Routers",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Cisco RV132W and RV134W Wireless VPN Routers"
            }
          ]
        }
      ],
      "datePublic": "2018-02-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-200",
              "description": "CWE-200",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-02-10T10:57:01",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "1040345",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1040345"
        },
        {
          "name": "102969",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/102969"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@cisco.com",
          "ID": "CVE-2018-0127",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Cisco RV132W and RV134W Wireless VPN Routers",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "Cisco RV132W and RV134W Wireless VPN Routers"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-200"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "1040345",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1040345"
            },
            {
              "name": "102969",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/102969"
            },
            {
              "name": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2",
              "refsource": "CONFIRM",
              "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2018-0127",
    "datePublished": "2018-02-08T07:00:00",
    "dateReserved": "2017-11-27T00:00:00",
    "dateUpdated": "2024-12-02T21:10:21.596Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted