ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2026-24700
7.2высокая

CVE-2026-24700

Описание

An OS command injection vulnerability exists in the start_lltd() function of the "rc" binary in Cisco RV130/RV130W with firmware 1.0.3.55 and RV110W routers with firmware 1.2.2.5 / 1.2.2.8. The machine_name configuration parameter is not properly sanitized, which could allow an authenticated remote attacker to execute arbitrary OS commands with root privileges.

Затрагиваемое ПО
Cisco Rv130 firmwareCisco Rv130Cisco Rv130w firmwareCisco Rv130wCisco Rv110w firmwareCisco Rv110w
CVSS
Балл7.2 — высокая
ВекторCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Источники
https://github.com/glkfc/IoT-Vulnerability/blob/main/cisco/RV130/1/wp-en.mdhttps://github.com/glkfc/IoT-Vulnerability/blob/main/cisco/RV130/1/wp-en.md