CVE-2019-15271 — Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability
2022-06-08 • CISA Known Exploited Vulnerability
[event] A deserialization of untrusted data vulnerability in the web-based management interface of certain Cisco Small Business RV Series Routers could allow an attacker to execute code with root privileges.
> AFFECTED SOFTWARE
| Field | Value |
|---|---|
| Vendor | Cisco |
| Product | RV Series Routers |
| CWE | CWE-502 |
| CVE ID | CVE-2019-15271 |
| Date Added | 2022-06-08 |
| Due Date | 2022-06-22 |
| Ransomware Campaign | Unknown |
> MITIGATION
Apply updates per vendor instructions.
Due Date: 2022-06-22