CVE-2021-1208

CVE-2021-1208 describes multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers, stemming from improper input validation. These flaws could allow an authenticated, remote attacker to execute arbitrary code as the root user or cause a denial of service by sending crafted HTTP requests. With a CVSS score of 7.2 (HIGH), the vulnerability requires valid administrator credentials for exploitation, but successful attacks can lead to full system compromise or device unavailability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage. Cisco has not released software updates to address these vulnerabilities.