The vulnerability in the web interface for managing microprogrammed software routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows a hacker to bypass authentication checks and load arbitrary files.

🗓️ 08 Apr 2021 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

A web interface vulnerability in RV series routers allows bypassing authentication and loading arbitrary files.

Reporter	Title	Published	Views	Family All 19
0day.today	Cisco RV Authentication Bypass / Code Execution Vulnerability	20 Apr 202100:00	–	zdt
0day.today	Cisco Small Business RV Series Authentication Bypass / Command Injection Exploit	1 Feb 202200:00	–	zdt
Circl	CVE-2021-1472	15 Apr 202111:02	–	circl
Cisco	Cisco Small Business RV Series Routers Vulnerabilities	7 Apr 202116:00	–	cisco
Tenable Nessus	Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-sb-rv-bypass-inject-Rbhgvfdx)	15 Apr 202100:00	–	nessus
CNNVD	Cisco Small Business RV Series Routers 授权问题漏洞	7 Apr 202100:00	–	cnnvd
Check Point Advisories	HTTP Headers Remote Code Execution (CVE-2020-10826; CVE-2020-10827; CVE-2020-10828; CVE-2020-13756; CVE-2021-1472; CVE-2021-1473)	3 Jun 202000:00	–	checkpoint_advisories
CVE	CVE-2021-1472	8 Apr 202104:06	–	cve
Cvelist	CVE-2021-1472 Cisco Small Business RV Series Routers Vulnerabilities	8 Apr 202104:06	–	cvelist
Metasploit	Cisco Small Business RV Series Authentication Bypass and Command Injection	1 Feb 202217:42	–	metasploit

Vulners

Node

cisco_systems cisco_small_business_rv340Range<1.0.03.21

OR

cisco_systems cisco_rv340wRange<1.0.03.21

OR

cisco_systems cisco_rv345Range<1.0.03.21

OR

cisco_systems cisco_rv345pRange<1.0.03.21

OR

cisco_systems cisco_small_business_rv160Range<1.0.01.03

OR

cisco_systems cisco_small_business_rv160wRange<1.0.01.03

OR

cisco_systems cisco_small_business_rv260Range<1.0.01.03

OR

cisco_systems cisco_small_business_rv260pRange<1.0.01.03

OR

cisco_systems cisco_small_business_rv260wRange<1.0.01.03

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx
packetstormsecurity	www.packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html
web	www.web.nvd.nist.gov/view/vuln/detail

13 Sep 2024 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 25

CVSS 35.3

EPSS0.72472

web interface routers authentication bypass arbitrary files control session errors microprogrammed routers RV series routers