CVE-2014-2179

CVE Database · CVE-2014-2179

CVE-2014-2179

· N/AModified

CVSS v3.1

N/A

EPSS

1.63%

Published

Nov 7, 2014

Modified

May 6, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.

Weaknesses (CWE)

CWE-20

Affected Products (7)

cisco · rv180_firmwarevulnerable

cisco · rv180vulnerable

cisco · rv180wvulnerable

cisco · rv120w_firmwarevulnerable

cisco · rv120wvulnerable

cisco · rv220w_firmwarevulnerable

cisco · rv220wvulnerable

References (12)

http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html

http://seclists.org/fulldisclosure/2014/Nov/6

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv

PatchVendor Advisory

http://www.securityfocus.com/archive/1/533917/100/0/threaded

http://www.securitytracker.com/id/1031171

https://exchange.xforce.ibmcloud.com/vulnerabilities/98499

http://packetstormsecurity.com/files/128992/Cisco-RV-Overwrite-CSRF-Command-Execution.html

http://seclists.org/fulldisclosure/2014/Nov/6

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv

KEV Catalog EPSS Scores Vendors All CVEs