CVE-2020-3357 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability

🗓️ 16 Jul 2020 17:21:24Reported by ciscoType

CVE-2020-3357 Cisco VPN Routers SSL Remote Code Execution and DoS Vulnerabilit

Reporter	Title	Published	Views	Family All 10
BDU FSTEC	The vulnerability of the implementation of the VPN Secure Sockets Layer (SSL) function in the microprogramming software for Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345, and Cisco Small Business RV345P routers allows a perpetrator to execute arbitrary code or cause service interruptions.	21 Jul 202000:00	–	bdu_fstec
Cisco	Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability	15 Jul 202016:00	–	cisco
Tenable Nessus	Cisco Dual WAN Gigabit VPN Routers < 1.0.03.18 SSL RCE and DoS (cisco-sa-sb-rce-dos-9ZAjkx4)	9 Sep 202000:00	–	nessus
CNVD	Arbitrary Code Execution Vulnerability in Multiple Cisco Products	20 Jul 202000:00	–	cnvd
CVE	CVE-2020-3357	16 Jul 202017:21	–	cve
EUVD	EUVD-2020-24628	7 Oct 202500:30	–	euvd
NVD	CVE-2020-3357	16 Jul 202018:15	–	nvd
OSV	CVE-2020-3357	16 Jul 202018:15	–	osv
Prion	Race condition	16 Jul 202018:15	–	prion
Vulnrichment	CVE-2020-3357 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Remote Code Execution and Denial of Service Vulnerability	16 Jul 202017:21	–	vulnrichment

[
  {
    "product": "Cisco Small Business RV Series Router Firmware",
    "vendor": "Cisco",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rce-dos-9ZAjkx4

16 Jul 2020 17:21Current

9.8High risk

Vulners AI Score9.8

CVSS 3.19.8

EPSS0.04116

CWE-20