RCE in Cisco RV110W/RV130W/RV215W Web Management Interface

This repository provides a working exploit for CVE-2019-1663, a critical unauthenticated remote code execution vulnerability in Cisco RV110W, RV130W, and RV215W routers. The exploit (exploit-cve-2019-1663.py) is a Python script that crafts a malicious HTTP POST request to the router's web management interface, triggering a stack-based buffer overflow and leveraging ROP gadgets to execute arbitrary commands. The payload establishes a reverse shell using telnet, redirecting input and output over TCP ports 4444 and 4445. The accompanying rev_shell.py script acts as a listener, handling bidirectional communication with the compromised device. The repository is well-documented, with a README explaining the vulnerability, exploitation process, and repository structure. The exploit is operational and requires the attacker to adjust certain offsets for different firmware versions. No hardcoded IP addresses are present; the user must specify the target router's management interface. The code is intended for educational and authorized testing purposes only.

This repository contains a working exploit for CVE-2019-1663, a buffer overflow vulnerability in the web management interface of certain Cisco routers (notably RV320/RV325). The exploit is implemented in Python (exploit.py) and is designed to achieve remote code execution by sending a specially crafted HTTP POST request to the /login.cgi endpoint of a vulnerable device. The payload leverages ROP gadgets and the system() function to execute an arbitrary shell command provided by the attacker. The README.md provides a detailed binary analysis of the vulnerability, including the root cause (improper use of strcpy), exploitation context, and relevant ROP gadgets. The exploit requires the attacker to know the target's IP address and have network access to the web management interface. The code is operational and demonstrates the full exploitation process, from payload construction to command execution.