CVE-2020-3330CWE-798

Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability

Critical · published July 16, 2020

CVSS v3.0
9.8
EPSS
3%
Percentile
88.9
In the wild
Unconfirmed
What it is

🚨 A default password is all it takes for an attacker to waltz right into your Cisco RV110W router! 🔥 Think of it like leaving the back door of your house wide open with a sign saying 'Come on in, everything's yours!' That's what this vulnerability does, giving attackers an easy route to take over your device without breaking a sweat. Once inside, an attacker could gain full control of your router, potentially compromising your entire network. They could change settings, intercept data, and generally wreak havoc, leaving your sensitive information exposed and your security in shambles. This isn't just a minor annoyance; it's a recipe for disaster!

Put simply

Think of it like leaving the back door of your house wide open with a sign saying 'Come on in, everything's yours!' That's what this vulnerability does, giving attackers an easy route to take over your device without breaking a sweat. The vulnerability exists due to a default and static password for a system account in the Telnet service of the Cisco RV110W Wireless-N VPN Firewall Routers, allowing unauthenticated remote access to high-privileged functions on the device.

What to do

Once inside, an attacker could gain full control of your router, potentially compromising your entire network. They could change settings, intercept data, and generally wreak havoc, leaving your sensitive information exposed and your security in shambles. This isn't just a minor annoyance; it's a recipe for disaster! Change the default password immediately and disable the Telnet service if it's not needed. Ensure you update your device firmware to the latest version to patch any existing vulnerabilities and improve security measures. Regularly audit your network devices and configurations to maintain a strong security posture. You've got this! Just follow these steps, and you'll fortify your network in no time! 🛡️

The record
Technical detail
CVSS v3.0
9.8 · CRITICAL
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03441 · 88.9th percentile
Weakness
CWE-798 · Use of Hard-coded Credentials
Published
2020-07-16T17:20Z
EPSS history
Timeline
  • 16 JUL 17:20Z
    Cisco Small Business RV110W Wireless-N VPN Firewall Static Default Credential Vulnerability
    cvelistv5