CVE-2021-34730

Análise do Cisco RV110W UPnP 0day Prefácio Recentemente, o UPnP está em destaque. Por coincidência, tenho um Cisco RV110W em mãos. Em agosto de 2021, a Cisco divulgou oficialmente um 0day relacionado ao UPnP na série RV, mas os detalhes específicos não foram revelados. Então, decidi usar o...

VulnCheck KEV: CVE-2021-34730

A vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

Critical Flaw Found in Older Cisco Small Business Routers Won't Be Fixed

A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019. Tracked as CVE-2021-34730 CVSS score: 9.8, the issue resides in the routers' Universal Plug-and-Play UPnP service, enabling an...

Cisco Small Business routers vulnerable to remote attacks, won’t get a patch

In a security advisory, Cisco has informed users that a vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart...

CVE-2021-34730

creationtimestamp| type| source ---|---|--- 2021-08-19 00:17:06+00:00| seen| https://t.me/cibsecurity/27569 2021-08-19 10:15:20+00:00| seen| https://t.me/codebysec/4855 2021-08-19 17:20:16+00:00| seen| https://t.me/NeKaspersky/1146 2021-08-19 18:21:36+00:00| seen| https://t.me/icscert/479...

CVE-2021-34730

CVE-2021-34730 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. It arises from improper validation in the UPnP service, enabling unauthenticated remote code execution as root or a device restart (DoS). The affected devices are end-of-life, and Cisco has not released softwar...