The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers allows a hacker to enhance their privileges.

🗓️ 07 Oct 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Guest to administrator privilege escalation in Cisco Small Business routers web interface via crafted web request.

Reporter	Title	Published	Views	Family All 10
Cisco	Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities	2 Oct 202416:00	–	cisco
CNNVD	Cisco Small Business多款产品安全漏洞	2 Oct 202400:00	–	cnnvd
CVE	CVE-2024-20393	2 Oct 202416:53	–	cve
Cvelist	CVE-2024-20393 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation Vulnerability	2 Oct 202416:53	–	cvelist
EUVD	EUVD-2024-18108	3 Oct 202520:07	–	euvd
NVD	CVE-2024-20393	2 Oct 202417:15	–	nvd
OSV	CVE-2024-20393	2 Oct 202417:15	–	osv
Positive Technologies	PT-2024-6633 · Cisco · Cisco Small Business Rv340W +3	2 Oct 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-20393	5 Feb 202501:20	–	redhatcve
Vulnrichment	CVE-2024-20393 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation Vulnerability	2 Oct 202416:53	–	vulnrichment

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv34x-privesc-rce-qE33TCm
web	www.web.nvd.nist.gov/view/vuln/detail

07 Oct 2024 00:00Current

5.5Medium risk

Vulners AI Score5.5

CVSS 38.8

CVSS 29

EPSS0.00589

privilege escalation web interface Cisco Small Business routers authentication weakness web request