CVE-2021-1472

🗓️ 08 Apr 2021 04:06:54Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 10 Media mentions👁 212 Views

Vulnerabilities in Cisco Small Business RV Series Routers. Remote code execution, authentication bypass.

Reporter	Title	Published	Views	Family All 20
0day.today	Cisco RV Authentication Bypass / Code Execution Vulnerability	20 Apr 202100:00	–	zdt
0day.today	Cisco Small Business RV Series Authentication Bypass / Command Injection Exploit	1 Feb 202200:00	–	zdt
BDU FSTEC	The vulnerability in the web interface for managing microprogrammed software routers such as RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, and RV345P allows a hacker to bypass authentication checks and load arbitrary files.	8 Apr 202100:00	–	bdu_fstec
Circl	CVE-2021-1472	15 Apr 202111:02	–	circl
Cisco	Cisco Small Business RV Series Routers Vulnerabilities	7 Apr 202116:00	–	cisco
Tenable Nessus	Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-sb-rv-bypass-inject-Rbhgvfdx)	15 Apr 202100:00	–	nessus
CNNVD	Cisco Small Business RV Series Routers 授权问题漏洞	7 Apr 202100:00	–	cnnvd
Check Point Advisories	HTTP Headers Remote Code Execution (CVE-2020-10826; CVE-2020-10827; CVE-2020-10828; CVE-2020-13756; CVE-2021-1472; CVE-2021-1473)	3 Jun 202000:00	–	checkpoint_advisories
Cvelist	CVE-2021-1472 Cisco Small Business RV Series Routers Vulnerabilities	8 Apr 202104:06	–	cvelist
Metasploit	Cisco Small Business RV Series Authentication Bypass and Command Injection	1 Feb 202217:42	–	metasploit

NVD

Node

AND

cisco rv160_firmwareRange<1.0.01.03

cisco rv160Match-

Node

AND

cisco rv160w_firmwareRange<1.0.01.03

cisco rv160wMatch-

Node

AND

cisco rv260_firmwareRange<1.0.01.03

cisco rv260Match-

Node

AND

cisco rv260p_firmwareRange<1.0.01.03

cisco rv260pMatch-

Node

AND

cisco rv260w_firmwareRange<1.0.01.03

cisco rv260wMatch-

Node

AND

cisco rv340_firmwareRange<1.0.03.21

cisco rv340Match-

Node

AND

cisco rv340w_firmwareRange<1.0.03.21

cisco rv340wMatch-

Node

AND

cisco rv345_firmwareRange<1.0.03.21

cisco rv345Match-

Node

AND

cisco rv345p_firmwareRange<1.0.03.21

cisco rv345pMatch-

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2021/Apr/39
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx
packetstormsecurity	www.packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html

17 Jun 2026 03:31Current

8.3High risk

Vulners AI Score8.3

CVSS 27.5

CVSS 3.15.3 - 9.8

EPSS0.72472

SSVC