What is the CVSS score of CVE-2014-2179?

CVE-2014-2179 has a CVSS 2.0 base score of 5.0 (Medium). CVSS vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. EPSS exploitation probability: 0.3%.

Is there a patch available for CVE-2014-2179?

Yes, a patch is available for CVE-2014-2179. Update the affected software to the latest version immediately.

Rv180 Firmware CVE-2014-2179

MEDIUM

Improper Input Validation (CWE-20)

2014-11-07 psirt@cisco.com

Cisco Information Disclosure Rv180 Firmware Rv180 Rv180W Rv120W Firmware Rv120W Rv220W Firmware Rv220W

5.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

5.0 MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:L/Au:N/C:N/I:P/A:N

Attack Vector

Network

Attack Complexity

Low

Confidentiality

None

Integrity

Availability

None

Lifecycle Timeline

CVE Published

Nov 07, 2014 - 11:55 cve.org

MEDIUM 5.0

DescriptionCVE.org

The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998.

AnalysisAI

Technical ContextAI

This vulnerability is classified under CWE-20. The Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to upload files to arbitrary locations via a crafted HTTP request, aka Bug ID CSCuh86998. Affected products include: Cisco Rv180 Firmware, Cisco Rv180, Cisco Rv180W, Cisco Rv120W Firmware, Cisco Rv120W. Version information: before 1.0.5.9.

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.