The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN lies in the insufficient verification of input data. This allows a malicious actor to execute arbitrary code or trigger a service failure.

🗓️ 03 Feb 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 1 Views

Cisco RV340 to RV345P interface has insufficient input validation, enabling arbitrary code execution.

Reporter	Title	Published	Views	Family All 11
Cisco	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability	11 Jan 202316:00	–	cisco
Tenable Nessus	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers RCE and DoS (cisco-sa-sb-rv-rcedos-7HjP74jD)	19 Jan 202300:00	–	nessus
CNNVD	Cisco Small Business RV340 和 RV345 操作系统命令注入漏洞	12 Jan 202300:00	–	cnnvd
CVE	CVE-2023-20007	19 Jan 202301:40	–	cve
Cvelist	CVE-2023-20007	19 Jan 202301:40	–	cvelist
EUVD	EUVD-2023-24186	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20007	20 Jan 202307:15	–	nvd
OSV	CVE-2023-20007	20 Jan 202307:15	–	osv
Prion	Input validation	20 Jan 202307:15	–	prion
Positive Technologies	PT-2023-1276 · Cisco · Cisco Small Business Rv340W +3	11 Jan 202300:00	–	ptsecurity

Vulners

Node

cisco_systems cisco_rv345Range<1.0.03.29

OR

cisco_systems cisco_rv340wRange<1.0.03.29

OR

cisco_systems cisco_rv345pRange<1.0.03.29

OR

cisco_systems cisco_rv340Range<1.0.03.29

Source	Link
vuldb	www.vuldb.com/ru/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-20007
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-rcedos-7HjP74jD
web	www.web.nvd.nist.gov/view/vuln/detail

03 Feb 2023 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 34.7

CVSS 25.8

EPSS0.00384

Cisco RV340 RV345 router input validation arbitrary code web interface