Is CVE-2019-15271 exploited in the wild?

Yes. CVE-2019-15271 is known to be exploited in the wild, first recorded on 8 June 2022. Treat it as urgent.

How severe is CVE-2019-15271?

Critical severity, with a CVSS score of 8.8, published 8 June 2022.

Which products and versions are affected?

Cisco RV016 Multi-WAN VPN Router Firmware < 4.2.3.10; Cisco RV042 Dual WAN VPN Router Firmware < 4.2.3.10; Cisco RV042G Dual Gigabit WAN VPN Router Firmware < 4.2.3.10; Cisco RV082 Dual WAN VPN Router Firmware < 4.2.3.10.

Is there a fix for CVE-2019-15271?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2019-15271 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2019-15271?

Check whether you run Cisco RV Series Routers. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-15271: Cisco RV Series Routers Deserialization of Untrusted Data Vulnerability

Q: Is there a fix for CVE-2019-15271?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2019-15271 attacked?

It is attacked over the network, in a network appliance.

Q: Am I affected by CVE-2019-15271?

Check whether you run Cisco RV Series Routers. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2019-15271 · Severity: critical · CVSS 8.8 · Exploited in the wild · Published 2022-06-08

A deserialization of untrusted data vulnerability in the web-based management interface of Cisco Small Business RV Series Routers allows an authenticated, remote attacker to execute arbitrary commands with root privileges. The flaw exists due to insufficient input validation of HTTP payloads, requiring the attacker to possess valid credentials or an active session token.

Vendors: Cisco.

Quick answers

Is CVE-2019-15271 exploited in the wild?: Yes. CVE-2019-15271 is known to be exploited in the wild, first recorded on 8 June 2022. Treat it as urgent.
How severe is CVE-2019-15271?: Critical severity, with a CVSS score of 8.8, published 8 June 2022.
Which products and versions are affected?: Cisco RV016 Multi-WAN VPN Router Firmware < 4.2.3.10; Cisco RV042 Dual WAN VPN Router Firmware < 4.2.3.10; Cisco RV042G Dual Gigabit WAN VPN Router Firmware < 4.2.3.10; Cisco RV082 Dual WAN VPN Router Firmware < 4.2.3.10.
Is there a fix for CVE-2019-15271?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2019-15271 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2019-15271?: Check whether you run Cisco RV Series Routers. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Affected products

Cisco RV016 Multi-WAN VPN Router Firmware < 4.2.3.10
Cisco RV042 Dual WAN VPN Router Firmware < 4.2.3.10
Cisco RV042G Dual Gigabit WAN VPN Router Firmware < 4.2.3.10
Cisco RV082 Dual WAN VPN Router Firmware < 4.2.3.10

Timeline

2019-11-06: advisory: Cisco published the original security advisory.
2019-11-25: disclosed: NVD published the CVE entry.
2022-06-08: kev added: CISA added the vulnerability to the Known Exploited Vulnerabilities (KEV) catalog.
2022-06-08: exploited: Vulnerability reported as exploited in the wild.

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.