CVE-2020-3330
A vulnerability in the Telnet service of Cisco Small Business RV110W Wireless-N VPN Firewall Routers could allow an unauthenticated, remote attacker to take full control of the device with a high-privileged account. The vulnerability exists because a system account has a default and static password. An attacker could exploit this vulnerability by using this default account to connect to the affected system. A successful exploit could allow the attacker to gain full control of an affected device.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - psirt@cisco.com
- Published
- 2020-07-16
- Last modified
- 2024-11-15
- Weaknesses
- CWE-798
Affected products
- Cisco Rv110w Wireless-n Vpn Firewall Firmware (Cisco)
- Rv110w Wireless-n Vpn Firewall Firmware (Cisco)
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv110w-static-cred-BMTWBWTy