Cisco warned customers of a critical authentication bypass vulnerability due to publicly available exploit code affecting multiple End of Life (EoL) VPN routers.
Security flaw (tracking CVE-2023-20025) was discovered in the web-based management interface of Cisco Small Business (SMB) RV016, RV042, RV042G, and RV082 routers provided by Hou Liuyang of Qihoo 360 Netlab.
“[These vulnerabilities] A remote attacker could bypass authentication or execute arbitrary commands on the underlying operating system of the affected device,” Cisco wrote.
according to bug cloud CTO Casey Ellis said SMB routers are widely deployed, and in the post-COVID hybrid/work-from-home world, a new Cisco vulnerability could affect thousands of devices.
“branch, [common operating environments]even home offices are potential users of vulnerable products,” explains Ellis.
“Financially motivated attackers will be interested in these devices because of their high volume, and nation-states will probably take heed because of the size and importance of potential users.”
Additionally, the executive believes this vulnerability is an attractive target from a technical perspective.
“If I can get an RCE as an attacker, [remote code execution] The ability to move laterally increases exponentially in the core routing or network infrastructure. ”
said Mike Parkin, senior technical engineer at vulcan cyberagreed with what Ellis pointed out and added that while all models affected by these vulnerabilities are officially EoL, they are still in fairly widespread use.
“The challenge is that these devices are typically found in small businesses with limited resources or used by individuals who may not have the budget to replace them,” warns Parkin.
“Unfortunately for them, Cisco has no intention of fixing this, so anyone still using one of these should strongly consider replacing it with a new kit sooner or later. .”
Cisco has confirmed that it has not released software updates to address these vulnerabilities and that there are no workarounds that address these vulnerabilities.
The flaw was discovered several weeks later by Krishna C. Tata, Security Risk and Architecture Manager at Cisco. discussed the issue Various security compliance frameworks.
