CVE-2014-2178 describes a Cross-Site Request Forgery (CSRF) vulnerability in the administrative web interface of Cisco RV120W, RV180, RV180W, and RV220W routers. This flaw allows remote attackers to hijack an administrator's authenticated session. With a CVSS score of 6.8, this vulnerability has a medium severity, indicating that an attacker could achieve partial confidentiality, integrity, and availability impact with medium attack complexity. There is no evidence of active exploitation, nor are there public exploit modules available in Metasploit, Nuclei, or ExploitDB, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 1.0.3.10CPE matchmatch criteria | cpe:2.3:o:cisco:rv180_firmware:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:cisco:rv180:-:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:cisco:rv180w:-:*:*:*:*:*:*:* | ||
<= 1.0.5.8CPE matchmatch criteria | cpe:2.3:o:cisco:rv220w_firmware:*:*:*:*:*:*:*:* | ||
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:h:cisco:rv220w:-:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.