CVE-2020-3145

CVE-2020-3145 describes multiple vulnerabilities in the web-based management interface of several Cisco RV series VPN routers (RV110W, RV130, RV130W, RV215W). These vulnerabilities stem from improper validation of user-supplied data, allowing an authenticated, remote attacker to execute arbitrary code. With a CVSS score of 8.8 (HIGH), a successful exploit could lead to high impact on confidentiality, integrity, and availability, as an attacker could gain high-privilege access to the underlying operating system. While the vulnerability is severe, there is no evidence of active exploitation, nor are there publicly available exploits in Metasploit, Nuclei, or ExploitDB, and it has received minimal community discussion or media coverage.