NVD

Id
29567  
Name
CVE-2014-0683  
Description
The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2014-03-06  
Modified Date
2014-03-07  
Seq
2014-0683  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
156645 29567 CVE-2014-0683 20140305 Cisco Small Business Router Password Disclosure Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
12704 JVNDB-2014-001579 複数の Cisco Wireless-N VPN 製品のファームウェアにおける管理アクセス権を取得される脆弱性 Cisco RV110W Wireless-N VPN Firewall、RV215W Wireless-N VPN Router、および CVR100W Wireless-N VPN Router のファームウェアの Web 管理インターフェースは、変更された認証リクエストのリプレイを制限しないため、管理アクセス権を取得される脆弱性が存在します。 CVE-2014-0683 68084 CVE-2014-0683 29567 10 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-001579.html 2014-03-05 2014-03-07 View