CVE-2019-1897
A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.
Published:Jun 20, 2019
Last Modified:Nov 21, 2024
EPS:Jun 20, 2019
EPSS Score:0.05537
CVSS Score:5.3
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Rv110w
Cisco
Rv110w
Vendor
Cisco
Product
Rv110w Firmware
Cisco
Rv110w Firmware
Vendor
Cisco
Product
Rv130w
Cisco
Rv130w
Vendor
Cisco
Product
Rv130w Firmware
Cisco
Rv130w Firmware
Vendor
Cisco
Product
Rv215w
Cisco
Rv215w
Vendor
Cisco
Product
Rv215w Firmware
Cisco
Rv215w Firmware
Exploits
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
