CVE-2021-1198

CVE-2021-1198 describes multiple input validation vulnerabilities in the web-based management interface of several Cisco Small Business RV series routers, including the RV110W, RV130, RV130W, and RV215W. An authenticated, remote attacker could exploit these flaws by sending crafted HTTP requests. Successful exploitation could lead to arbitrary code execution as root or a denial of service (DoS) condition due to unexpected device restarts. The vulnerability has a CVSS score of 7.2 (High), indicating a significant risk. While requiring valid administrator credentials, the attack can be performed remotely over the network with low complexity. The potential impact includes complete system compromise (arbitrary code execution) or service disruption. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The CVE has received minimal community discussion and media coverage, suggesting it is not widely known or actively targeted. Cisco has not released software updates to address these vulnerabilities.