CVE Feed

    Dashboard / CVE / CVE-2023-20025

    CVE-2023-20025

    A vulnerability in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, and RV082 Routers could allow an unauthenticated, remote attacker to bypass authentication on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to bypass authentication and gain root access on the underlying operating system.

    Published:Jan 19, 2023
    Last Modified:Mar 12, 2025
    EPS:Jan 19, 2023
    EPSS Score:0.00277
    CVSS Score:9

    Affected Products

    Vendor
    Cisco
    Product
    Rv016
    Vendor
    Cisco
    Product
    Rv016 Firmware
    Vendor
    Cisco
    Product
    Rv042
    Vendor
    Cisco
    Product
    Rv042 Firmware
    Vendor
    Cisco
    Product
    Rv042g
    Vendor
    Cisco
    Product
    Rv042g Firmware
    Vendor
    Cisco
    Product
    Rv082
    Vendor
    Cisco
    Product
    Rv082 Firmware

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High