Zero-day vulnerability found on Cisco routers

guest · Jul 6, 2020

Zero-day vulnerability found on Cisco routers
July 3, 2020
https://www.itweb.co.za/content/rW1xLv59ZBAvRk6m/pXnWJadMba7bjO1e

Researchers from attack surface management company CyCognito have uncovered a significant cross-site scripting (XSS) vulnerability on the Web admin interface of Cisco small business router models RV042 and RV042G.

The vulnerability was detected when CyCognito was mapping the attack surface of one of its customers that was using a small business router from Cisco.
Following responsible disclosure processes, once the CyCognito platform discovered the Cisco vulnerability, it was disclosed to, and verified by Cisco.

“A vulnerability in an admin configuration utility can be even more damaging as phished credentials can be used to try to gain access to other systems within a company’s infrastructure,” he adds.
Click to expand...

CyCognito: CyCognito Platform Automatically Detects Four Zero-Day Vulnerabilities

Our platform recently discovered four such “Unknown Unknown” issues. The first to be verified by the vendor was a reflected Cross-Site Scripting (XSS) vulnerability on the web admin interface of Cisco Router model RV042 and RV042G, CVE-2020-3431. The remaining three will be discussed once the respective vendors have taken steps to address the issues.
Click to expand...

Log in or Sign up

Zero-day vulnerability found on Cisco routers

guest Guest

Log in or Sign up

Zero-day vulnerability found on Cisco routers

guest Guest

Useful Searches