CVE-2021-1520

🗓️ 06 May 2021 12:51:16Reported by ciscoType

cve🔗 web.nvd.nist.gov👁 49 Views🌐 WEB

A vulnerability in Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers allows authenticated local attacker to run arbitrary commands with root privileges

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-1520	7 May 202111:07	–	circl
Cisco	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability	5 May 202116:00	–	cisco
CNNVD	Cisco 路由器安全漏洞	5 May 202100:00	–	cnnvd
Cvelist	CVE-2021-1520 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability	6 May 202112:51	–	cvelist
EUVD	EUVD-2021-6987	3 Oct 202520:07	–	euvd
NVD	CVE-2021-1520	6 May 202113:15	–	nvd
Prion	Design/Logic Flaw	6 May 202113:15	–	prion
seebug.org	Cisco RV34X系列权限提升漏洞（CVE-2021-1520）	14 May 202100:00	–	seebug
Vulnrichment	CVE-2021-1520 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability	6 May 202112:51	–	vulnrichment

NVD

Node

cisco rv340_firmwareRange<1.0.03.21

AND

cisco rv340Match-

Node

cisco rv340w_firmwareRange<1.0.03.21

AND

cisco rv340wMatch-

Node

cisco rv345_firmwareRange<1.0.03.21

AND

cisco rv345Match-

Node

cisco rv345p_firmwareRange<1.0.03.21

AND

cisco rv345pMatch-

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-34x-privesc-GLN8ZAQE

Parameter	Position	Path	Description	CWE
message	binary	127.0.0.1:9999	Privilege escalation via vpnTimer: crafting UDP payload triggers root-level command execution in the embedded device	CWE-123

21 Nov 2024 05:44Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.16.7

CVSS 27.2

EPSS0.00027

SSVC

CWE-123