Cisco SMB routers hit with another major security flaw
XSS vulnerability could have allowed attackers to take over the routers' web configuration utility
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
Security researchers at CyCognito have discovered a significant cross-site scripting (XSS) vulnerability in the web admin interface of twosmall business routersfrom Cisco.
TheXSS vulnerabilityexists in the company’s RVO42 and RV042G routers and it provides attackers with an easy way to take control of the devices' web configuration utility.
This could allow an attacker to perform a number of admin actions from viewing and modifying sensitive information to taking control of the router or even having the ability to move laterally and gain access to other systems on the network.
Admin configuration utility
CyCognito’s platform was actually responsible for discovering the XSS vulnerability in Cisco’s RVO42 and RV042G routers which the company’s research team and then Cisco verified.
The platform detected the vulnerability when mapping the attack surface of a customer that was using one of the affected Cisco small business routers. It was at this point that the research team quickly realized that it had found a previously unreported vulnerability orzero-day.
In apress release, head of security research at CyCognito, Alex Zaslavsky provided further insight on the firm’s findings, saying:
“Commandeering a network router puts attackers in a prime position for intercepting company secrets and crucial data and to advance their attacks. Attackers value XSS vulnerabilities because they can be used to access a victim’s current session and even take over an account and impersonate the victim. A vulnerability in an admin configuration utility can be even more damaging as phished credentials can be used to try to gain access to other systems within a company’s infrastructure. That’s why we worked with Cisco to help resolve this vulnerability to ensure organizations remain secure.”
Are you a pro? Subscribe to our newsletter
Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed!
According to a recentsecurity advisory, Cisco has now released software updates that address the XSS vulnerability in both routers.
After working with the TechRadar Pro team for the last several years, Anthony is now the security and networking editor at Tom’s Guide where he covers everything from data breaches and ransomware gangs to the best way to cover your whole home or business with Wi-Fi. When not writing, you can find him tinkering with PCs and game consoles, managing cables and upgrading his smart home.
Cisco issues patch to fix serious flaw allowing possible industrial systems takeover
Washington state court systems taken offline following cyberattack
Lego will let you build Sir Ernest Shackleton’s iconic lost ship, the Endurance, in its next Icons set
