CVE DatabaseCVE-2018-0125

Updated 2026-06-17한국어 권고문 →

CVE-2018-01259.8/CRITICALCISA KEVCWE-20CWE-20

CVE-2018-0125 Technical Vulnerability Analysis & Patch Advisory (CVSS 9.8)

⚡ Jump to Patch

Affected Vendors

security-advisory

Affected Components

enterprise-software

Published Date

2018-02-08

CVSS v3.1

9.8

CRITICAL

EPSS (30d)

55.2%

FIRST.org

CISA KEV

Exploited

NVD Source ↗

Executive & SecOps Summary

SECOPS ASSESSMENT

Affected Scope

Systems running unpatched versions impacted by CVE-2018-0125

Impact

A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unaut...

Mitigation

Apply vendor security patches and restrict external network exposure.

Affected Products & Version Scope

All unpatched versions listed in the official NVD CPE configurations

Remediation & Live Workaround Commands

PATCH & WORKAROUND

Remediation Steps

Upgrade to the latest patched release from the vendor.
Apply virtual patching or network segmentation until maintenance windows allow full patching.

Interactive SecOps Remediation Checklist

0/4 (0%)

Recommended Security Control & Mitigation Partner

NordLayer / Zero-Trust Network Access

Reduce your attack surface immediately with automated vulnerability scanning and runtime protection.

Stop Exposing VPN Ports to the Internet — Switch to Zero-Trust Access

Eliminate public-facing VPN concentrators and firewall management ports with identity-first Zero-Trust Network Access.

90% Attack Surface Reduction · Hardware-Free

Explore Zero-Trust Network Access Plans

Technical Root Cause & Exploitation Mechanics

Technical Overview

A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and gain full control of an affected system, including issuing commands with root privileges. The attacker could also cause an affected system to reload, resulting in a denial of service (DoS) condition. The vulnerability is due to an incomplete input validation on user-controlled input in an HTTP request to the targeted device. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to execute arbitrary code as the root user and gain full control of the affected system or cause it to reload, resulting in a DoS condition. This vulnerability is fixed in firmware version 1.0.1.11 for the following Cisco products: RV132W ADSL2+ Wireless-N VPN Router and RV134W VDSL2 Wireless-AC VPN Router. Cisco Bug IDs: CSCvg92737, CSCvh60170.

CVSS Score: 9.8 (CRITICAL)
CWE IDs: CWE-20, CWE-20

Official Vendor Advisories & References

NVD Original English Description

http://www.securityfocus.com/bid/103140

Source: psirt@cisco.com · Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1040336

Source: psirt@cisco.com · Broken Link, Third Party Advisory, VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x

Source: psirt@cisco.com · Broken Link, Vendor Advisory

http://www.securityfocus.com/bid/103140

Source: af854a3a-2127-422b-91ae-364da2661108 · Broken Link, Third Party Advisory, VDB Entry

http://www.securitytracker.com/id/1040336

Source: af854a3a-2127-422b-91ae-364da2661108 · Broken Link, Third Party Advisory, VDB Entry

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180207-rv13x

Source: af854a3a-2127-422b-91ae-364da2661108 · Broken Link, Vendor Advisory

Frequently Asked SecOps Questions (CVE-2018-0125)

FAQ

Q1. How critical is CVE-2018-0125 and is it actively exploited in the wild?

CVE-2018-0125 is rated CVSS 9.8 (CRITICAL) with a 30-day EPSS exploitation probability of 55.2%. It is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, requiring immediate emergency remediation.

Q2. Which vendors and products are affected by CVE-2018-0125?

Primary impacted vendors include security-advisory across enterprise-software. Scope summary: All unpatched versions listed in the official NVD CPE configurations

Q3. What temporary mitigations or workarounds exist for CVE-2018-0125 before patching?

[Mitigation] Apply vendor security patches and restrict external network exposure. Follow the CLI remediation commands and interactive SecOps checklist on this page to restrict exposure prior to your maintenance window.

SECOPS WORKBENCH INTEGRATION