Cisco RV110W, RV130W, and RV215W Routers Denial of Service Vulnerability

published 2019-06-20 7 y ago modified 2026-06-17 4 mo ago also EUVD-2019-10454

cvss: 5.3; version 3.0, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 4.5%; EPSS 4.5% chance of exploitation in 30 days, percentile 91%
public exploits: 0; none known

A vulnerability in the web-based management interface of Cisco RV110W, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to disconnect clients that are connected to the guest network on an affected router. The vulnerability is due to improper authorization of an HTTP request. An attacker could exploit this vulnerability by accessing the URL for device disconnection and providing the connected device information. A successful exploit could allow the attacker to deny service to specific clients that are connected to the guest network.

Patch / fix

fixed in 1

Cisco Cisco RV130W Wireless-N Multifunction VPN Router Firmware 1.0.3.51

CISA SSVC

Exploitation: none
Automatable: yes
Technical impact: partial
Assessed: 23 mo ago (2024-11-19)

Exploit prediction

4.48% chance of exploitation in the next 30 days, higher than 91% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

tenable.com https://www.tenable.com/security/research/tra-2019-29 referenced PoC, tagged "exploit" by a source, unverified

CVSS scores

assigned by	version	score	vector
CNA	3.0	5.3	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD	3.1	5.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
NVD	2.0	5.0	AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

Cisco Cisco RV130W Wireless-N Multifunction VPN Router Firmware

Classification

Weakness

CWE-285 Improper Authorization
CWE-306 Missing Authentication for Critical Functionality

References

tenable.com /security/research/tra-2019-29
exploit, third-party-advisory
tools.cisco.com /security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-rv-dos
vendor-advisory
securityfocus.com /bid/108848
vdb-entry, third-party-advisory

Sources

CVE List CVE-2019-1897
NVD CVE-2019-1897

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

Summary