CVE-2023-20007

🗓️ 19 Jan 2023 01:40:17Reported by ciscoType

Vulnerability in Cisco Small Business RV340, RV340W, RV345, and RV345P dual WAN Gigabit VPN routers allows authenticated remote attackers to execute arbitrary code or cause a denial of service

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability	11 Jan 202316:00	–	cisco
Tenable Nessus	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers RCE and DoS (cisco-sa-sb-rv-rcedos-7HjP74jD)	19 Jan 202300:00	–	nessus
CNNVD	Cisco Small Business RV340 和 RV345 操作系统命令注入漏洞	12 Jan 202300:00	–	cnnvd
Cvelist	CVE-2023-20007	19 Jan 202301:40	–	cvelist
EUVD	EUVD-2023-24186	3 Oct 202520:07	–	euvd
NVD	CVE-2023-20007	20 Jan 202307:15	–	nvd
Prion	Input validation	20 Jan 202307:15	–	prion
Positive Technologies	PT-2023-1276 · Cisco · Cisco Small Business Rv340W +3	11 Jan 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-20007	23 May 202501:43	–	redhatcve

NVD

Node

cisco rv340_firmwareRange<1.0.03.29

AND

cisco rv340Match-

Node

cisco rv340w_firmwareRange<1.0.03.29

AND

cisco rv340wMatch-

Node

cisco rv345_firmwareRange<1.0.03.29

AND

cisco rv345Match-

Node

cisco rv345p_firmwareRange<1.0.03.29

AND

cisco rv345pMatch-

[
  {
    "vendor": "Cisco",
    "product": "Cisco Small Business RV Series Router Firmware",
    "versions": [
      {
        "version": "1.0.00.29",
        "status": "affected"
      },
      {
        "version": "1.0.00.33",
        "status": "affected"
      },
      {
        "version": "1.0.01.16",
        "status": "affected"
      },
      {
        "version": "1.0.01.17",
        "status": "affected"
      },
      {
        "version": "1.0.01.18",
        "status": "affected"
      },
      {
        "version": "1.0.01.20",
        "status": "affected"
      },
      {
        "version": "1.0.02.16",
        "status": "affected"
      },
      {
        "version": "1.0.03.15",
        "status": "affected"
      },
      {
        "version": "1.0.03.16",
        "status": "affected"
      },
      {
        "version": "1.0.03.17",
        "status": "affected"
      },
      {
        "version": "1.0.03.18",
        "status": "affected"
      },
      {
        "version": "1.0.03.19",
        "status": "affected"
      },
      {
        "version": "1.0.03.20",
        "status": "affected"
      },
      {
        "version": "1.0.03.21",
        "status": "affected"
      },
      {
        "version": "1.0.03.22",
        "status": "affected"
      },
      {
        "version": "1.0.03.24",
        "status": "affected"
      },
      {
        "version": "1.0.03.26",
        "status": "affected"
      },
      {
        "version": "1.0.03.27",
        "status": "affected"
      },
      {
        "version": "1.0.03.28",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-rcedos-7HjP74jD

21 Nov 2024 07:40Current

7.3High risk

Vulners AI Score7.3

CVSS 3.14.7 - 7.2

EPSS0.00384