Approved changes feed: RSS · Atom

cpe:2.3:a:cisco:cisco_rv180w_wireless-n_multifunction_vpn_router:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCisco (e1b3baff-aaf9-56a6-a68a-41e28ce616a5)
ProductCisco Rv180W Wireless N Multifunction Vpn Router (ed5b93d9-86a7-5e05-913c-682f3cb80f77)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-0405 vulnerable 2026-06-08 05:10:23.623550 Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability
A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to conduct a directory path traversal attack on a targeted device. The issue is due to improper sanitization of user-supplied input in HTTP request parameters that describe filenames. An attacker could exploit this vulnerability by using directory traversal techniques to submit a path to a desired file location.
Published: 2018-10-05T17:00:00.000Z
Updated: 2024-11-26T14:26:09.815Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-0404 vulnerable 2026-06-08 05:10:23.621862 Cisco RV180W Wireless-N Multifunction VPN Router SQL Injection Vulnerability
A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. A vulnerability in the web framework code for Cisco RV180W Wireless-N Multifunction VPN Router and Small Business RV Series RV220W Wireless Network Security Firewall could allow an unauthenticated, remote attacker to execute arbitrary SQL queries. The attacker could retrieve sensitive information which should be restricted. The product has entered the end-of-life phase and there will be no more firmware fixes.
Published: 2018-10-05T16:00:00.000Z
Updated: 2024-11-26T14:26:27.024Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.