Details of VAR-202006-1123

ID

VAR-202006-1123

CVE

CVE-2020-3287

TITLE

plural Cisco Small Business RV Buffer error vulnerability in series routers

Trust: 0.8

sources: JVNDB: JVNDB-2020-006861

DESCRIPTION

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected device. The vulnerabilities are due to insufficient boundary restrictions on user-supplied input to scripts in the web-based management interface. An attacker with administrative privileges that are sufficient to log in to the web-based management interface could exploit each vulnerability by sending crafted requests that contain overly large values to an affected device, causing a stack overflow. A successful exploit could allow the attacker to cause the device to crash or allow the attacker to execute arbitrary code with root privileges on the underlying operating system. plural Cisco Small Business RV A buffer error vulnerability exists in series routers.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Cisco Small Business RV016 Multi-WAN VPN is a VPN router from Cisco in the United States. The vulnerability stems from the program's failure to properly limit the user's input boundary

Trust: 2.25

sources: NVD: CVE-2020-3287 // JVNDB: JVNDB-2020-006861 // CNVD: CNVD-2020-36258 // VULMON: CVE-2020-3287

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2020-36258

AFFECTED PRODUCTS

vendor:	cisco	model:	rv320	scope:	lte	version:	1.5.1.05	Trust: 1.0
vendor:	cisco	model:	rv042g	scope:	lte	version:	4.2.3.10	Trust: 1.0
vendor:	cisco	model:	rv042	scope:	lte	version:	4.2.3.10	Trust: 1.0
vendor:	cisco	model:	rv082	scope:	lte	version:	4.2.3.10	Trust: 1.0
vendor:	cisco	model:	rv016	scope:	lte	version:	4.2.3.10	Trust: 1.0
vendor:	cisco	model:	rv325	scope:	lte	version:	1.5.1.05	Trust: 1.0
vendor:	cisco	model:	rv320 dual gigabit wan vpn router	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	rv325 dual gigabit wan vpn router	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	rv016 multi-wan vpn	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	rv042 dual wan vpn	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	rv042g dual gigabit wan vpn	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	rv082 dual wan vpn	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	small business rv016 multi-wan vpn	scope:	lte	version:	<=4.2.3.10	Trust: 0.6
vendor:	cisco	model:	rv042 dual wan vpn	scope:	lte	version:	<=4.2.3.10	Trust: 0.6
vendor:	cisco	model:	rv042g dual gigabit wan vpn	scope:	lte	version:	<=4.2.3.10	Trust: 0.6
vendor:	cisco	model:	rv082 dual wan vpn	scope:	lte	version:	<=4.2.3.10	Trust: 0.6
vendor:	cisco	model:	rv320 dual gigabit wan vpn	scope:	lte	version:	<=1.5.1.05	Trust: 0.6
vendor:	cisco	model:	rv325 dual gigabit wan vpn	scope:	lte	version:	<=1.5.1.05	Trust: 0.6

sources: CNVD: CNVD-2020-36258 // JVNDB: JVNDB-2020-006861 // NVD: CVE-2020-3287

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2020-3287
value:	HIGH
Trust: 1.0
ykramarz@cisco.com:	CVE-2020-3287
value:	HIGH
Trust: 1.0
NVD:	JVNDB-2020-006861
value:	HIGH
Trust: 0.8
CNVD:	CNVD-2020-36258
value:	HIGH
Trust: 0.6
CNNVD:	CNNVD-202006-1164
value:	HIGH
Trust: 0.6
VULMON:	CVE-2020-3287
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2020-3287
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.1
NVD:	JVNDB-2020-006861
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8
CNVD:	CNVD-2020-36258
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6

nvd@nist.gov:	CVE-2020-3287
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.9
version:	3.1
Trust: 1.0
ykramarz@cisco.com:	CVE-2020-3287
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.2
impactScore:	5.9
version:	3.0
Trust: 1.0
NVD:	JVNDB-2020-006861
baseSeverity:	HIGH
baseScore:	7.2
vectorString:	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	HIGH
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: CNVD: CNVD-2020-36258 // VULMON: CVE-2020-3287 // JVNDB: JVNDB-2020-006861 // CNNVD: CNNVD-202006-1164 // NVD: CVE-2020-3287 // NVD: CVE-2020-3287

PROBLEMTYPE DATA

problemtype:	CWE-119	Trust: 1.8
problemtype:	CWE-787	Trust: 1.0

sources: JVNDB: JVNDB-2020-006861 // NVD: CVE-2020-3287

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202006-1164

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202006-1164

CONFIGURATIONS

sources: JVNDB: JVNDB-2020-006861

PATCH

title:	cisco-sa-rv-routers-stack-vUxHmnNz	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-routers-stack-vUxHmnNz	Trust: 0.8
title:	Patch for Multiple Buffer Overflow Vulnerabilities in Cisco Products (CNVD-2020-36258)	url:	https://www.cnvd.org.cn/patchInfo/show/224609	Trust: 0.6
title:	Multiple Cisco Product Buffer Error Vulnerability Fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=121857	Trust: 0.6
title:	Cisco: Cisco Small Business RV Series Routers Stack Overflow Arbitrary Code Execution Vulnerabilities	url:	https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-rv-routers-stack-vUxHmnNz	Trust: 0.1

sources: CNVD: CNVD-2020-36258 // VULMON: CVE-2020-3287 // JVNDB: JVNDB-2020-006861 // CNNVD: CNNVD-202006-1164

EXTERNAL IDS

db:	NVD	id:	CVE-2020-3287	Trust: 3.1
db:	JVNDB	id:	JVNDB-2020-006861	Trust: 0.8
db:	CNVD	id:	CNVD-2020-36258	Trust: 0.6
db:	AUSCERT	id:	ESB-2020.2119	Trust: 0.6
db:	AUSCERT	id:	ESB-2020.2119.2	Trust: 0.6
db:	CNNVD	id:	CNNVD-202006-1164	Trust: 0.6
db:	VULMON	id:	CVE-2020-3287	Trust: 0.1

sources: CNVD: CNVD-2020-36258 // VULMON: CVE-2020-3287 // JVNDB: JVNDB-2020-006861 // CNNVD: CNNVD-202006-1164 // NVD: CVE-2020-3287

REFERENCES

url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-rv-routers-stack-vuxhmnnz	Trust: 3.0
url:	https://nvd.nist.gov/vuln/detail/cve-2020-3287	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-3287	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2020.2119/	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/esb-2020.2119.2/	Trust: 0.6
url:	https://cwe.mitre.org/data/definitions/787.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1

sources: CNVD: CNVD-2020-36258 // VULMON: CVE-2020-3287 // JVNDB: JVNDB-2020-006861 // CNNVD: CNNVD-202006-1164 // NVD: CVE-2020-3287

SOURCES

db:	CNVD	id:	CNVD-2020-36258
db:	VULMON	id:	CVE-2020-3287
db:	JVNDB	id:	JVNDB-2020-006861
db:	CNNVD	id:	CNNVD-202006-1164
db:	NVD	id:	CVE-2020-3287

LAST UPDATE DATE

2024-08-14T13:24:27.508000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2020-36258	date:	2020-07-06T00:00:00
db:	VULMON	id:	CVE-2020-3287	date:	2021-08-06T00:00:00
db:	JVNDB	id:	JVNDB-2020-006861	date:	2020-07-21T00:00:00
db:	CNNVD	id:	CNNVD-202006-1164	date:	2021-08-09T00:00:00
db:	NVD	id:	CVE-2020-3287	date:	2021-08-06T18:44:50.723

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2020-36258	date:	2020-07-06T00:00:00
db:	VULMON	id:	CVE-2020-3287	date:	2020-06-18T00:00:00
db:	JVNDB	id:	JVNDB-2020-006861	date:	2020-07-21T00:00:00
db:	CNNVD	id:	CNNVD-202006-1164	date:	2020-06-17T00:00:00
db:	NVD	id:	CVE-2020-3287	date:	2020-06-18T03:15:12.823