A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an unauthenticated, remote attacker to view information displayed in the web-based management interface. The vulnerability is due to improper authorization of HTTP requests. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based management interface of an affected device. A successful exploit could allow the attacker to view information displayed in the web-based management interface without authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rv016_multi-wan_vpn_firmware | Cisco | * | 4.2.3.10 (excluding) |