CVE-2021-34730

Cisco RV110W UPnP 0day 分析 前言 最近UPnP比较火，恰好手里有一台Cisco RV110W，在2021年8月份思科官方公布了一个Cisco RV系列关于UPnP的0day，但是具体的细节并没有公布出来。于是想要用手中的设备调试挖掘一下这个漏洞，漏洞的公告可以在官网看到。 准备工作 首先将固件更新到最新版本1.2.2.8...

VulnCheck KEV: CVE-2021-34730

A vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

Critical Flaw Found in Older Cisco Small Business Routers Won't Be Fixed

A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019. Tracked as CVE-2021-34730 CVSS score: 9.8, the issue resides in the routers' Universal Plug-and-Play UPnP service, enabling an...

Cisco Small Business routers vulnerable to remote attacks, won’t get a patch

In a security advisory, Cisco has informed users that a vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart...

CVE-2021-34730

creationtimestamp| type| source ---|---|--- 2021-08-19 00:17:06+00:00| seen| https://t.me/cibsecurity/27569 2021-08-19 10:15:20+00:00| seen| https://t.me/codebysec/4855 2021-08-19 17:20:16+00:00| seen| https://t.me/NeKaspersky/1146 2021-08-19 18:21:36+00:00| seen| https://t.me/icscert/479...

CVE-2021-34730

A stack buffer overflow vulnerability exists in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers . The root cause is the improper validation of incoming UPnP traffic , specifically within the upnp_portmap_add function during the handling...