Cisco Security Advisory: Multiple Vulnerabilities in Cisco Small Business RV Series Routers

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Small
                         Business RV Series Routers

Advisory ID: cisco-sa-20141105-rv

Revision 1.0

For Public Release 2014 November 5 16:00  UTC (GMT)

+-----------------------------------------------------------
-----------

Summary
=======

The Cisco RV120W Wireless-N VPN Firewall, Cisco RV180 VPN Router,
Cisco RV180W Wireless-N Multifunction VPN Router, and Cisco RV220W
Wireless Network Security Firewall are affected by the following
vulnerabilities:

 * Cisco RV Series Routers Command Injection Vulnerability
 * Cisco RV Series Routers HTTP Referer Header Vulnerability
 * Cisco RV Series Routers Insecure File Upload Vulnerability

These vulnerabilities are independent of each other; a release that
is affected by one of the vulnerabilities may not be affected by the
others.

Cisco has released free software updates that address these
vulnerabilities. Workarounds that mitigate these vulnerabilities are
available.

This advisory is available at the following link:
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20141105-rv