What is CVE-2020-3332?

CVE-2020-3332 is a high-severity vulnerability in Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware, classified under OS Command Injection. CVSS score: 8.1/10. Published 2020-07-16.

How severe is CVE-2020-3332?

High severity. CVSS v3 base score is 8.1 out of 10.

RCE in Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware

CVE-2020-3332

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers could allow an authenticated, remote attacker to inject arbitrary shell commands that are executed by an affecte…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.015 (81.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.1 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H.

Affected products

Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware — versions n/a

Weakness classification (CWE)

CWE-78 — OS Command Injection

References

20200715 Cisco Small Business RV110W, RV130, RV130W, and RV215W Series Routers Command Shell Injection Vulnerability (vendor-advisory, x_refsource_CISCO)

Frequently asked questions

What is CVE-2020-3332?: CVE-2020-3332 is a high-severity vulnerability in Cisco Rv130w Wireless-n Multifunction Vpn Router Firmware, classified under OS Command Injection. CVSS score: 8.1/10. Published 2020-07-16.
How severe is CVE-2020-3332?: High severity. CVSS v3 base score is 8.1 out of 10.