Cybersecurity has come leaps and bounds since we first started exploring the internet. Technology and the knowledge surrounding it have also progressed significantly. With that, so too has our understanding of the need to secure and protect our connections.
Cisco has recently issued an advisory to customers to upgrade their routers. The advisory comes in light of a vulnerability which allows a remote attacker to execute arbitrary code in a series of routers. This would cause a Denial of Service condition which would prevent access to the internet and connected servers.
The vulnerability affects relatively dated business routers – specifically, the Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers. Malicious actors are able to access root privileges through the web management interface of the routers. While Cisco is aware of the exploit, it seems like the company has no plans to patch the vulnerability in these dated devices. Of course, the company has announced the end-of-life status in an advisory released back in 2019.
The only silver lining for those planning to continue using the aforementioned routers is that the vulnerability can only be exploited if the web management interface is enabled. This can be determined by checking the status within the settings of the router. That said, it is definitely advisable to update to a more current router for better coverage and connectivity if not anything else.