Read the docs
TI-2018-00100 Aliases CVE-2018-0125GHSA-4g9c-v6g6-3jgm

Improper input validation in Cisco RV132W and RV134W

Priority CRITICAL 100Exploited in the wildCWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA.

Summary

A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to an incomplete input validation on user-controlled input in an HTTP request to the targeted device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user and gain full control of the affected system or cause it to reload, resulting in a DoS condition. This vulnerability is fixed in firmware version 1.0.1.11 for the following Cisco products: RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. Cisco Bug IDs: CSCvg92737, CSCvh60170.

Why it matters now

Exploitation Active In CISA KEV since 2022-03-25CISA due date 2022-04-15
EPSS 0.55186 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
—Cisco RV132W and RV134WCisco RV132W and RV134W—No fix listedCNA
  • Cisco RV132W and RV134W Vendor— Affected Cisco RV132W and RV134W Fixed in — No fix listed CNA

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:o:cisco:rv132w_firmware:1.0:*:*:*:*:*:*:*1.0VulnerableCisco
cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
cpe:2.3:o:cisco:rv134w_firmware:1.0:*:*:*:*:*:*:*1.0VulnerableCisco
cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*not specified by NVDRunning onCisco
  • cpe:2.3:o:cisco:rv132w_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco
  • cpe:2.3:o:cisco:rv134w_firmware:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·Cisco
  • cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2022-03-25 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2018-0125
  3. 2026-10-03 Alias added: GHSA-4g9c-v6g6-3jgm

References

Advisory 1

  • TI-2018-00101 Information disclosure in Cisco RV132W and RV134W Wireless VPN Routers CVSS 3.1CRITICAL 9.8
  • TI-2021-01036 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities CVSS 3.1HIGH 8.8
  • TI-2021-01014 Stack-based buffer overflow in Cisco Small Business RV Series Router Firmware CVSS 3.1HIGH 7.2
  • TI-2021-01035 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities CVSS 3.1HIGH 7.4
  • TI-2021-00978 Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities CVSS 3.1HIGH 7.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences