Cross-Site Request Forgery in Cisco RV Routers Affecting Cisco Systems

CVE-2014-2178

Summary

This vulnerability allows remote attackers to exploit the administrative web interface of Cisco RV routers, specifically targeting RV220W, RV120W, RV180, and RV180W models. By tricking an authenticated administrator into performing actions unknowingly via CSRF, attackers can gain unauthorized access and control over the device without user consent. Such exploitation can lead to significant security breaches, including but not limited to the hijacking of session tokens.

References