CyberRota Analysis
AI-GeneratedCisco RV130, RV130W, and RV110W routers are vulnerable due to an OS command injection flaw in the start_lltd() function of the "rc" binary, stemming from inadequate sanitization of the machine_name configuration parameter. This vulnerability enables authenticated remote attackers to execute arbitrary OS commands with root privileges, posing a significant risk to network integrity and security. Organizations using the affected router models should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machine_name configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.
Related CVEs
Other vulnerabilities affecting the same vendor(s)