CVE-2020-3331 CRITICAL

CVE-2020-3331: Cisco RV110W and RV215W Series Routers Arbitrary Code Execution Vulnerability

Vendor Cisco
Product Cisco RV110W Wireless-N VPN Firewall Firmware
Weakness CWE-119
Published July 16, 2020
Last update November 15, 2024
View on NVD All CVEs

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in the web-based management interface of Cisco RV110W Wireless-N VPN Firewall and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input data by the web-based management interface. An attacker could exploit this vulnerability by sending crafted requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code with the privileges of the root user.

Key dates

02Disclosure timeline

July 16, 2020 CVE published
November 15, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-1626 Jianming Antivirus IoControlCode kvcore.sys memory corruption CVE-2024-2929 Rockwell Automation Arena Simulation Vulnerable To Memory Corruption CVE-2025-7310 IrfanView CADImage Plugin DWG File Parsing Memory Corruption Remote Code Execution Vulnerability CVE-2026-27890 Firebird has Pre-Auth DOS when Processing Out of Order CNCT_specific_data Segments CVE-2025-2148 PyTorch Tuple torch.ops.profiler._call_end_callbacks_on_jit_fut memory corruption