CVE-2018-0127 Missing authorization in Cisco RV132W and RV134W Wireless VPN Routers
Unauthenticated attackers can view sensitive configuration parameters, including admin passwords, on Cisco RV132W and RV134W routers due to missing authentication checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-0127?
CVE-2018-0127 is a critical missing authorization vulnerability in Cisco RV132W and RV134W Wireless VPN Routers, published on 8 Feb 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device, which could lead to the disclosure of confidential information. The vulnerability is due to the absence of user authentication requirements for certain pages that are part of the web interface and contain confidential information for an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device and examining the HTTP response to the request. A successful exploit could allow the attacker to view configuration parameters, including the administrator password, for the affected device. Cisco Bug IDs: CSCvg92739, CSCvh60172.
Which versions are affected by CVE-2018-0127?
It affects 2 products.
Products include Cisco Rv132w Firmware, Cisco Rv134w Firmware.
How do I fix CVE-2018-0127?
No fix has been published for CVE-2018-0127 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2018-0127 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2018-0127 exists.
Public exploit code: 1 Nuclei template.
Other vulnerabilities in Cisco RV132W and RV134W Wireless VPN Routers
- CVE-2018-0125 Cisco VPN Routers Remote Code Execution
- CVE-2021-1251 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities
- CVE-2021-1308 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities
- CVE-2021-1309 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities
- CVE-2021-1287 Command injection in Cisco Small Business RV Series Router Firmware
Sources
Also known as GHSA-3368-gx38-c6qj.