Every CVESearch/Get API key

CVE-2014-2178

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco...

6.8 Medium

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Exploit likelihood

1.18%Down 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used6.8

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Record
CVE-2014-2178
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-352
Updated
2026-11-02
CVE ListNo score

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Record
CVE-2014-2178
Updated
2026-11-02
EUVDEUVD-2014-2218No score

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Record
EUVD-2014-2218
Updated
2026-11-03
GitHub AdvisoriesGHSA-x77r-9j3c-w6wjNo score

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco...

Cross-site request forgery (CSRF) vulnerability in the administrative web interface in the Cisco RV router firmware on RV220W devices, before 1.0.5.9 on RV120W devices, and before 1.0.4.14 on RV180 and RV180W devices allows remote attackers to hijack the authentication of administrators, aka Bug ID CSCuh87145.

Record
GHSA-x77r-9j3c-w6wj
Weakness
CWE-352
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-2178 is a medium vulnerability (CVSS 6.8) in Cisco Rv120w, published November 7, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.18%, the 68th percentile. No source names a fixed version.

References

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open