CVE-2023-20118 - Vulnerability Details

Vendors	Products
Cisco	Rv016 Rv016 Firmware Rv042 Rv042 Firmware Rv042g Rv042g Firmware Rv082 Rv082 Firmware Rv320 Rv320 Firmware Rv325 Rv325 Firmware

Link	Providers
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5

Type	Values Removed	Values Added
Weaknesses	CWE-20
CPEs	cpe:2.3:o:cisco:rv016_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv016_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv042_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv042_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv042g_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv042g_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv082_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv082_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv320_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv320_firmware:4.2.3.08:::::::* cpe:2.3:o:cisco:rv325_firmware:1.5.1.13:::::::* cpe:2.3:o:cisco:rv325_firmware:4.2.3.08:::::::*	cpe:2.3:o:cisco:rv016_firmware:::::::: cpe:2.3:o:cisco:rv042_firmware:::::::: cpe:2.3:o:cisco:rv042g_firmware:::::::: cpe:2.3:o:cisco:rv082_firmware:::::::: cpe:2.3:o:cisco:rv320_firmware:::::::: cpe:2.3:o:cisco:rv325_firmware::::::::

Type	Values Removed	Values Added
Description	A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability.	A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]

Type	Values Removed	Values Added
Metrics	ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`	kev `{'dateAdded': '2025-03-03'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-20118", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "state": "PUBLISHED", "assignerShortName": "cisco", "dateReserved": "2022-10-27T18:47:50.345Z", "datePublished": "2023-04-05T16:05:41.067Z", "dateUpdated": "2025-03-12T16:21:05.953Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-03-12T16:21:05.953Z"}, "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.\r\n\r Cisco has not and will not release software updates that address this vulnerability.   However, administrators may disable the affected feature as described in the Workarounds [\"#workarounds\"] section.\r\n\r  {{value}} [\"%7b%7bvalue%7d%7d\"])}]]"}], "affected": [{"vendor": "Cisco", "product": "Cisco Small Business RV Series Router Firmware", "versions": [{"version": "1.0.1.17", "status": "affected"}, {"version": "1.0.2.03", "status": "affected"}, {"version": "1.1.0.09", "status": "affected"}, {"version": "1.1.1.19", "status": "affected"}, {"version": "1.1.1.06", "status": "affected"}, {"version": "1.2.1.13", "status": "affected"}, {"version": "1.2.1.14", "status": "affected"}, {"version": "1.3.1.12", "status": "affected"}, {"version": "1.3.2.02", "status": "affected"}, {"version": "1.3.1.10", "status": "affected"}, {"version": "1.4.2.15", "status": "affected"}, {"version": "1.4.2.17", "status": "affected"}, {"version": "1.4.2.19", "status": "affected"}, {"version": "1.4.2.20", "status": "affected"}, {"version": "1.4.2.22", "status": "affected"}, {"version": "1.5.1.05", "status": "affected"}, {"version": "1.5.1.11", "status": "affected"}, {"version": "1.5.1.13", "status": "affected"}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "cwe", "cweId": "CWE-77"}]}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5", "name": "cisco-sa-sbr042-multi-vuln-ej76Pke5"}], "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "baseScore": 6.5, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "NONE"}}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for vulnerabilities CVE-2023-20025 and CVE-2023-20026 that are described in this advisory.\r\n\r\nIn March 2025, the Cisco PSIRT became aware of additional attempted exploitation of some of these vulnerabilities in the wild. Cisco continues to strongly recommend that customers upgrade their hardware to Meraki or Cisco 1000 Series Integrated Services Routers to remediate these vulnerabilities."}], "source": {"advisory": "cisco-sa-sbr042-multi-vuln-ej76Pke5", "discovery": "EXTERNAL", "defects": ["CSCwe41652"]}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:57:35.886Z"}, "title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5", "name": "cisco-sa-sbr042-multi-vuln-ej76Pke5", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20118", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-03T20:12:24.673297Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2025-03-03", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}], "timeline": [{"time": "2025-03-03T00:00:00+00:00", "lang": "en", "value": "CVE-2023-20118 added to CISA KEV"}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-03T20:14:14.379Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-20118 (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

state : PUBLISHED (string)

assignerShortName : cisco (string)

dateReserved : 2022-10-27T18:47:50.345Z (string)

datePublished : 2023-04-05T16:05:41.067Z (string)

dateUpdated : 2025-03-12T16:21:05.953Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-03-12T16:21:05.953Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]] (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Small Business RV Series Router Firmware (string)

versions : [ »

0 : { »

version : 1.0.1.17 (string)

status : affected (string)

}

1 : { »

version : 1.0.2.03 (string)

status : affected (string)

}

2 : { »

version : 1.1.0.09 (string)

status : affected (string)

}

3 : { »

version : 1.1.1.19 (string)

status : affected (string)

}

4 : { »

version : 1.1.1.06 (string)

status : affected (string)

}

5 : { »

version : 1.2.1.13 (string)

status : affected (string)

}

6 : { »

version : 1.2.1.14 (string)

status : affected (string)

}

7 : { »

version : 1.3.1.12 (string)

status : affected (string)

}

8 : { »

version : 1.3.2.02 (string)

status : affected (string)

}

9 : { »

version : 1.3.1.10 (string)

status : affected (string)

}

10 : { »

version : 1.4.2.15 (string)

status : affected (string)

}

11 : { »

version : 1.4.2.17 (string)

status : affected (string)

}

12 : { »

version : 1.4.2.19 (string)

status : affected (string)

}

13 : { »

version : 1.4.2.20 (string)

status : affected (string)

}

14 : { »

version : 1.4.2.22 (string)

status : affected (string)

}

15 : { »

version : 1.5.1.05 (string)

status : affected (string)

}

16 : { »

version : 1.5.1.11 (string)

status : affected (string)

}

17 : { »

version : 1.5.1.13 (string)

status : affected (string)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

type : cwe (string)

cweId : CWE-77 (string)

}

]

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

name : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

}

]

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

attackVector : NETWORK (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : NONE (string)

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for vulnerabilities CVE-2023-20025 and CVE-2023-20026 that are described in this advisory. In March 2025, the Cisco PSIRT became aware of additional attempted exploitation of some of these vulnerabilities in the wild. Cisco continues to strongly recommend that customers upgrade their hardware to Meraki or Cisco 1000 Series Integrated Services Routers to remediate these vulnerabilities. (string)

}

]

source : { »

advisory : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

discovery : EXTERNAL (string)

defects : [ »

0 : CSCwe41652 (string)

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T08:57:35.886Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

name : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-20118 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : active (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-03T20:12:24.673297Z (string)

}

1 : { »

other : { »

type : kev (string)

content : { »

dateAdded : 2025-03-03 (string)

reference : https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json (string)

}

]

timeline : [ »

0 : { »

time : 2025-03-03T00:00:00+00:00 (string)

lang : en (string)

value : CVE-2023-20118 added to CISA KEV (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-03T20:14:14.379Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5", "name": "cisco-sa-sbr042-multi-vuln-ej76Pke5", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T08:57:35.886Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-20118", "role": "CISA Coordinator", "options": [{"Exploitation": "active"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-03T20:12:24.673297Z"}}}, {"other": {"type": "kev", "content": {"dateAdded": "2025-03-03", "reference": "https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}}}], "timeline": [{"lang": "en", "time": "2025-03-03T00:00:00+00:00", "value": "CVE-2023-20118 added to CISA KEV"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T16:23:08.484Z"}}], "cna": {"source": {"defects": ["CSCwe41652"], "advisory": "cisco-sa-sbr042-multi-vuln-ej76Pke5", "discovery": "EXTERNAL"}, "metrics": [{"format": "cvssV3_1", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Cisco", "product": "Cisco Small Business RV Series Router Firmware", "versions": [{"status": "affected", "version": "1.0.1.17"}, {"status": "affected", "version": "1.0.2.03"}, {"status": "affected", "version": "1.1.0.09"}, {"status": "affected", "version": "1.1.1.19"}, {"status": "affected", "version": "1.1.1.06"}, {"status": "affected", "version": "1.2.1.13"}, {"status": "affected", "version": "1.2.1.14"}, {"status": "affected", "version": "1.3.1.12"}, {"status": "affected", "version": "1.3.2.02"}, {"status": "affected", "version": "1.3.1.10"}, {"status": "affected", "version": "1.4.2.15"}, {"status": "affected", "version": "1.4.2.17"}, {"status": "affected", "version": "1.4.2.19"}, {"status": "affected", "version": "1.4.2.20"}, {"status": "affected", "version": "1.4.2.22"}, {"status": "affected", "version": "1.5.1.05"}, {"status": "affected", "version": "1.5.1.11"}, {"status": "affected", "version": "1.5.1.13"}]}], "exploits": [{"lang": "en", "value": "The Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for vulnerabilities CVE-2023-20025 and CVE-2023-20026 that are described in this advisory.\r\n\r\nIn March 2025, the Cisco PSIRT became aware of additional attempted exploitation of some of these vulnerabilities in the wild. Cisco continues to strongly recommend that customers upgrade their hardware to Meraki or Cisco 1000 Series Integrated Services Routers to remediate these vulnerabilities."}], "references": [{"url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5", "name": "cisco-sa-sbr042-multi-vuln-ej76Pke5"}], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.\r\n\r Cisco has not and will not release software updates that address this vulnerability.   However, administrators may disable the affected feature as described in the Workarounds [\"#workarounds\"] section.\r\n\r  {{value}} [\"%7b%7bvalue%7d%7d\"])}]]"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "cwe", "cweId": "CWE-77", "description": "Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "shortName": "cisco", "dateUpdated": "2025-03-12T16:21:05.953Z"}}}, "cveMetadata": {"cveId": "CVE-2023-20118", "state": "PUBLISHED", "dateUpdated": "2025-03-12T16:21:05.953Z", "dateReserved": "2022-10-27T18:47:50.345Z", "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633", "datePublished": "2023-04-05T16:05:41.067Z", "assignerShortName": "cisco"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

name : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T08:57:35.886Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-20118 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : active (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-03T20:12:24.673297Z (string)

}

1 : { »

other : { »

type : kev (string)

content : { »

dateAdded : 2025-03-03 (string)

reference : https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json (string)

}

]

timeline : [ »

0 : { »

lang : en (string)

time : 2025-03-03T00:00:00+00:00 (string)

value : CVE-2023-20118 added to CISA KEV (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-28T16:23:08.484Z (string)

}

]

cna : { »

source : { »

defects : [ »

0 : CSCwe41652 (string)

]

advisory : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

discovery : EXTERNAL (string)

}

metrics : [ »

0 : { »

format : cvssV3_1 (string)

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.5 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : HIGH (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : Cisco (string)

product : Cisco Small Business RV Series Router Firmware (string)

versions : [ »

0 : { »

status : affected (string)

version : 1.0.1.17 (string)

}

1 : { »

status : affected (string)

version : 1.0.2.03 (string)

}

2 : { »

status : affected (string)

version : 1.1.0.09 (string)

}

3 : { »

status : affected (string)

version : 1.1.1.19 (string)

}

4 : { »

status : affected (string)

version : 1.1.1.06 (string)

}

5 : { »

status : affected (string)

version : 1.2.1.13 (string)

}

6 : { »

status : affected (string)

version : 1.2.1.14 (string)

}

7 : { »

status : affected (string)

version : 1.3.1.12 (string)

}

8 : { »

status : affected (string)

version : 1.3.2.02 (string)

}

9 : { »

status : affected (string)

version : 1.3.1.10 (string)

}

10 : { »

status : affected (string)

version : 1.4.2.15 (string)

}

11 : { »

status : affected (string)

version : 1.4.2.17 (string)

}

12 : { »

status : affected (string)

version : 1.4.2.19 (string)

}

13 : { »

status : affected (string)

version : 1.4.2.20 (string)

}

14 : { »

status : affected (string)

version : 1.4.2.22 (string)

}

15 : { »

status : affected (string)

version : 1.5.1.05 (string)

}

16 : { »

status : affected (string)

version : 1.5.1.11 (string)

}

17 : { »

status : affected (string)

version : 1.5.1.13 (string)

}

]

}

]

exploits : [ »

0 : { »

lang : en (string)

value : The Cisco Product Security Incident Response Team (PSIRT) is aware that proof-of-concept exploit code is available for vulnerabilities CVE-2023-20025 and CVE-2023-20026 that are described in this advisory. In March 2025, the Cisco PSIRT became aware of additional attempted exploitation of some of these vulnerabilities in the wild. Cisco continues to strongly recommend that customers upgrade their hardware to Meraki or Cisco 1000 Series Integrated Services Routers to remediate these vulnerabilities. (string)

}

]

references : [ »

0 : { »

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

name : cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]] (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : cwe (string)

cweId : CWE-77 (string)

description : Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

shortName : cisco (string)

dateUpdated : 2025-03-12T16:21:05.953Z (string)

}

cveMetadata : { »

cveId : CVE-2023-20118 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-12T16:21:05.953Z (string)

dateReserved : 2022-10-27T18:47:50.345Z (string)

assignerOrgId : d1c1063e-7a18-46af-9102-31f8928bc633 (string)

datePublished : 2023-04-05T16:05:41.067Z (string)

assignerShortName : cisco (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"cisaActionDue": "2025-03-24", "cisaExploitAdd": "2025-03-03", "cisaRequiredAction": "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.", "cisaVulnerabilityName": "Cisco Small Business RV Series Routers Command Injection Vulnerability", "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1E1462E9-4464-492C-8B91-6E020B9DCB23", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:*", "matchCriteriaId": "701E3CF5-15C0-419A-97A8-9BD2C55D74AB", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "85E01122-CD88-4096-958A-8699B2A3DC3C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:*", "matchCriteriaId": "2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A620D1C-1FBB-46C9-9904-1FC6342ED85E", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:*", "matchCriteriaId": "F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:*", "matchCriteriaId": "24FC4446-22C0-4EC9-84B4-A76412680105", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1EA568A8-286F-4588-B946-6F9C97E08BCF", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:*", "matchCriteriaId": "7596F6D4-10DA-4F29-95AD-75B60F4670D6", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "F3B7DECE-18C4-45AE-AF5C-657A4795C7F0", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:*", "matchCriteriaId": "3435D601-EDA8-49FF-8841-EA6DF1518C75", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device.\r\n\r This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device.\r\n\r Cisco has not and will not release software updates that address this vulnerability.   However, administrators may disable the affected feature as described in the Workarounds [\"#workarounds\"] section.\r\n\r  {{value}} [\"%7b%7bvalue%7d%7d\"])}]]"}], "id": "CVE-2023-20118", "lastModified": "2025-04-02T20:31:59.040", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.2, "source": "psirt@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.2, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.2, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-04-13T07:15:21.080", "references": [{"source": "psirt@cisco.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5"}], "sourceIdentifier": "psirt@cisco.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "psirt@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

cisaActionDue : 2025-03-24 (string)

cisaExploitAdd : 2025-03-03 (string)

cisaRequiredAction : Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. (string)

cisaVulnerabilityName : Cisco Small Business RV Series Routers Command Injection Vulnerability (string)

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv016_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1E1462E9-4464-492C-8B91-6E020B9DCB23 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 701E3CF5-15C0-419A-97A8-9BD2C55D74AB (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv042_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 85E01122-CD88-4096-958A-8699B2A3DC3C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv042:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 2DCBB2D8-AACF-45EA-B9D4-DAECC7C792D1 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv042g_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 0A620D1C-1FBB-46C9-9904-1FC6342ED85E (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv042g:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F1CD7D9C-DDEF-4DF0-BCFB-A45301AE2C10 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv082_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9BBDB4B5-9528-43CE-B8E6-B509EFCD11BA (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv082:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 24FC4446-22C0-4EC9-84B4-A76412680105 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

4 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv320_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1EA568A8-286F-4588-B946-6F9C97E08BCF (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv320:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7596F6D4-10DA-4F29-95AD-75B60F4670D6 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

5 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:cisco:rv325_firmware:*:*:*:*:*:*:*:* (string)

matchCriteriaId : F3B7DECE-18C4-45AE-AF5C-657A4795C7F0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:cisco:rv325:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3435D601-EDA8-49FF-8841-EA6DF1518C75 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]] (string)

}

]

id : CVE-2023-20118 (string)

lastModified : 2025-04-02T20:31:59.040 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.2 (number)

source : psirt@cisco.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 7.2 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.2 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-04-13T07:15:21.080 (string)

references : [ »

0 : { »

source : psirt@cisco.com (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mitigation (string)

1 : Vendor Advisory (string)

]

url : https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sbr042-multi-vuln-ej76Pke5 (string)

}

]

sourceIdentifier : psirt@cisco.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : psirt@cisco.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation active

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction None

Exploitation active

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object