CVE-2018-0426— Cisco RV110W Wireless-N VPN Firewall、RV130W Wireless-N Multifunction VPN Router和RV215W Wireless-N VPN Router 路径遍历漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2018-0426の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability
ソース: CVE Program / CVE List V5
脆弱性説明
A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to the targeted device. A successful exploit could allow the attacker to gain access to arbitrary files on the affected device, resulting in the disclosure of sensitive information.
ソース: CVE Program / CVE List V5
CVSS情報
N/A
ソース: CVE Program / CVE List V5
脆弱性タイプ
对路径名的限制不恰当(路径遍历)
ソース: CVE Program / CVE List V5
脆弱性タイトル
Cisco RV110W Wireless-N VPN Firewall、RV130W Wireless-N Multifunction VPN Router和RV215W Wireless-N VPN Router 路径遍历漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco RV110W Wireless-N VPN Firewall、RV130W Wireless-N Multifunction VPN Router和RV215W Wireless-N VPN Router都是美国思科（Cisco）公司的产品。Cisco RV110W Wireless-N VPN Firewall是一款防火墙产品。RV130W Wireless-N Multifunction VPN Router和RV215W Wireless-N VPN Router都是企业级无线路由器产品
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco RV130W Wireless-N Multifunction VPN Router Firmware | n/a | - |
II. CVE-2018-0426の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2018-0426のインテリジェンス情報
请登录查看更多情报信息。
CVE-2018-0426 厂商安全公告 (2)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180905-rv-routers-traversalvendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2018-10-05 · 110 CVEs total
| CVE-2018-15391 | Cisco Remote PHY IPv4 Fragment Denial of Service Vulnerability | |
| CVE-2018-15408 | Cisco Webex Network Recording Player and Cisco Webex Player Remote Code Execution Vulnerab | |
| CVE-2018-15407 | Cisco HyperFlex World-Readable Sensitive Information Vulnerability | |
| CVE-2018-15406 | Cisco UCS Director Stored Cross-Site Scripting Vulnerability | |
| CVE-2018-15405 | Cisco Integrated Management Controller Supervisor and Cisco UCS Director Authenticated Web | |
| CVE-2018-15404 | Cisco Integrated Management Controller Supervisor and Cisco UCS Director System Resources | |
| CVE-2018-15403 | Multiple Cisco Unified Communications Products Open Redirect Vulnerability | |
| CVE-2018-15401 | Cisco Hosted Collaboration Mediation Fulfillment Cross-Site Request Forgery Vulnerability | |
| CVE-2018-15400 | Cisco Cloud Services Platform 2100 Cross-Site Scripting Vulnerability | |
| CVE-2018-15399 | Cisco Adaptive Security Appliance TCP Syslog Denial of Service Vulnerability | |
| CVE-2018-15398 | Cisco Adaptive Security Appliance Access Control List Bypass Vulnerability | |
| CVE-2018-15397 | Cisco Adaptive Security Appliance IPsec VPN Denial of Service Vulnerability | |
| CVE-2018-15396 | Cisco Unity Connection File Upload Denial of Service Vulnerability | |
| CVE-2018-15392 | Cisco Industrial Network Director DHCP Request Processing Denial of Service Vulnerability | |
| CVE-2018-15374 | Cisco IOS XE Software Digital Signature Verification Bypass Vulnerability | |
| CVE-2018-15377 | Cisco IOS and IOS XE Software Plug and Play Agent Memory Leak Vulnerability | |
| CVE-2018-15376 | Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary M | |
| CVE-2018-15375 | Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers Arbitrary M | |
| CVE-2018-15379 | Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability | |
| CVE-2018-15373 | Cisco IOS and IOS XE Software Cisco Discovery Protocol Denial of Service Vulnerability |
Showing 20 of 110 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2020-3332
Cisco Small Business RV110W, RV130, RV130W, and RV215W Serie - CVE-2020-3146
Cisco RV110W, RV130, RV130W, and RV215W Routers Management I - CVE-2020-3145
Cisco RV110W, RV130, RV130W, and RV215W Routers Management I - CVE-2020-3144
Cisco RV110W, RV130, RV130W, and RV215W Routers Authenticati - CVE-2020-3269
Cisco Small Business RV110W, RV130, RV130W, and RV215W Serie
同じベンダー: Cisco
- CVE-2026-20348
ClamAV XAR File Format Processing Memory Corruption Vulnerab - CVE-2026-20345
ClamAV GPT File Format Processing Memory Corruption Vulnerab - CVE-2026-20339
ClamAV PESpin File Format Processing Integer Overflow Vulner - CVE-2026-20347
ClamAV Mach-O File Format Processing Memory Corruption Vulne - CVE-2026-20346
ClamAV PDF File Format Processing Memory Corruption Vulnerab
同じ弱点: CWE-22
- CVE-2026-66777
Multiple vulnerabilities in SAP Business AI Platform (Approu - CVE-2026-44763
Directory Traversal vulnerability in SAP Manufacturing Integ - CVE-2026-72903
Tabby: Windows SFTP path traversal allows a malicious server - CVE-2026-73033
Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.l - CVE-2026-73030
unearth 0.18.2 Path Traversal via Unnormalized Paths and Sym
V. CVE-2018-0426へのコメント
まだコメントはありません