oguzhanozuzun301/cisco-rv-rce-pocPoC and exploit scripts for CVE-2023-20048 - Remote Code Execution vulnerability affecting Cisco RV series routers. Includes a vulnerability checker (PoC) and a working exploit for gaining remote shell access. For educational and research purposes only.
⚠ WARNING: For authorized testing only. Do not use against systems you do not own or have written permission to test. This is a Proof of Concept for authorized testing only.
Small repository with:
CiscoPoc.py — harmless PoC to check for CVE-2023-20048.CiscoRCE.py — exploit that attempts a reverse shell via the vulnerable form2ping.cgi.This script checks if a Cisco RV Series router is vulnerable to CVE-2023-20048, a command injection flaw leading to RCE as root.
requests (pip install requests)⚠ Note: According to the official NVD and Cisco advisory, CVE-2023-20048 is associated with Cisco Firepower Management Center (FMC). Make sure this CVE actually applies to the Cisco RV Series devices you are testing — if not, correct the CVE/advisory links to the appropriate CVE.
python3 CiscoPoc.py -t <TARGET_IP> -u <USER> -p <PASS>