What’s Vulnerable › Vulnerabilities

CVE-2014-0683

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 10.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2014-03-06 · updated 2026-06-17
• Weakness: CWE-255

Description

The web management interface on the Cisco RV110W firewall with firmware 1.2.0.9 and earlier, RV215W router with firmware 1.1.0.5 and earlier, and CVR100W router with firmware 1.0.1.19 and earlier does not prevent replaying of modified authentication requests, which allows remote attackers to obtain administrative access by leveraging the ability to intercept requests, aka Bug IDs CSCul94527, CSCum86264, and CSCum86275.

Affected products

• Cisco Cvr100W: all versions
• Cisco Cvr100W Firmware: through 1.0.1.19
• Cisco Rv110W: all versions
• Cisco Rv110W Firmware: through 1.2.0.9
• Cisco Rv215W: all versions
• Cisco Rv215W Firmware: through 1.1.0.5

References

• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd
• https://www.exploit-db.com/exploits/45986/
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140305-rpd
• https://www.exploit-db.com/exploits/45986/

Get alerted when CVE-2014-0683 or the next vulnerability affects your stack