Skip to content
Fencer Vulns
high 8.8

CVE-2019-15271 kev in the critical feed json

Cisco Small Business RV016, RV042, RV042G, and RV082 Routers Arbitrary Command Execution Vulnerability

published 2019-11-26 6 y ago modified 2026-06-17 4 mo ago also EUVD-2019-6279

cvss
8.8
version 3.0, CNA
cisa kev
Exploited
added 2022-06-08
epss
5.5%
EPSS 5.5% chance of exploitation in 30 days, percentile 92%
public exploits
0
none known

Summary

A vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an authenticated, remote attacker to execute arbitrary commands with root privileges. The attacker must have either a valid credential or an active session token. The vulnerability is due to lack of input validation of the HTTP payload. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web-based management interface of the targeted device. A successful exploit could allow the attacker to execute commands with root privileges.

Patch / fix

cisa required action Apply updates per vendor instructions.

  • cisco rv016_multi-wan_vpn_firmware 4.2.3.10
  • cisco rv042_dual_wan_vpn_firmware 4.2.3.10
  • cisco rv042g_dual_gigabit_wan_vpn_firmware 4.2.3.10
  • cisco rv082_dual_wan_vpn_firmware 4.2.3.10

Timeline

  1. Published
  2. Added to CISA KEV
  3. CISA patch deadline
  4. CISA SSVC: exploitation active

Known exploited

Added
4 y ago
Patch by
2022-06-22 (4 y ago)
Ransomware
Not known
Required action
Apply updates per vendor instructions.
Vendor, product
Cisco, RV Series Routers
CISA name
Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

CISA SSVC

Exploitation
Active, exploited in the wild
Automatable
no
Technical impact
total
Assessed
2 y ago

Exploit prediction

5.49% chance of exploitation in the next 30 days, higher than 92% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
CNA 3.0 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 3.1 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 9.0 AV:N/AC:L/Au:S/C:C/I:C/A:C

Affected products

  • Cisco Cisco Small Business RV Series Router Firmware

Classification

Weakness
  • CWE-502 Deserialization of Untrusted Data

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.