Lucene search
+L

107 matches found

Vulnrichment
Vulnrichment
added 2023/04/05 12:00 a.m.15 views

CVE-2023-20073 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

5.3CVSS7.3AI score0.90106EPSS
SaveExploits0References1
CVE
CVE
added 2023/04/05 12:00 a.m.269 views

CVE-2023-20073

CVE-2023-20073 affects Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The vulnerability stems from insufficient authorization enforcement during file uploads in the web-based management interface, allowing an unauthenticated, remote attacker to upload arbitrary files by send...

9.8CVSS6.3AI score0.90106EPSS
SaveIn wildExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/02/08 12:00 a.m.19 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and R345P allows a hacker to load arbitrary files.

The vulnerability of the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and R345P is related to the ability to load files of a malicious nature without limitation. Exploiting this vulnerability allows an attacker to upload arbitrary files...

5.3CVSS7.8AI score0.90106EPSS
SaveExploits0References4Affected Software4
Tenable Nessus
Tenable Nessus
added 2023/02/07 12:00 a.m.30 views

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload (cisco-sa-sb-rv-afu-EXxwA65V)

According to its self-reported version, Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers are affected by an arbitrary file upload vulnerability due to insufficient authorization enforcement mechanisms. An unauthenticated, remote attacker can exploit this to upload arbitrary...

9.8CVSS8.5AI score0.90106EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/02/03 12:00 a.m.14 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN lies in the insufficient verification of input data. This allows a malicious actor to execute arbitrary code or trigger a service failure.

The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a...

5.8CVSS7.5AI score0.00675EPSS
SaveExploits0References4Affected Software4
Cisco
Cisco
added 2023/02/01 4:00 p.m.88 views

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement...

5.3CVSS7.2AI score0.90106EPSS
SaveExploits0References1
CVE
CVE
added 2023/01/19 1:40 a.m.96 views

CVE-2023-20007

Cisco CVE-2023-20007 affects the web-based management interfaces of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The root cause is insufficient validation of user-supplied input to the web UI, exploitable by an authenticated attacker using crafted HTTP input...

7.2CVSS7.3AI score0.00675EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/01/12 12:00 a.m.45 views

Cisco Small Business RV340 和 RV345 操作系统命令注入漏洞

The Cisco Small Business RV340 and the Cisco Small Business RV345 are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. The Cisco Small Business RV340 is a router, a hardware device that connects two or more networks and acts as a gateway between them.The Cisco Small Busines...

7.2CVSS7.5AI score0.00675EPSS
SaveExploits0References3
OSV
OSV
added 2022/08/10 9:15 a.m.13 views

CVE-2022-20842

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the...

9.8CVSS7.6AI score0.0182EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/10 9:15 a.m.12 views

CVE-2022-20827

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the...

10CVSS7.6AI score0.01885EPSS
SaveExploits0References1
NVD
NVD
added 2022/08/10 9:15 a.m.31 views

CVE-2022-20827

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the...

10CVSS0.01885EPSS
SaveExploits0References1
CVE
CVE
added 2022/08/10 8:12 a.m.312 views

CVE-2022-20827

CVE-2022-20827 affects Cisco Small Business RV160/RV260/RV340/RV345 Series Routers. It is part of a set of vulnerabilities that allow an unauthenticated, remote attacker to either execute arbitrary code or cause a DoS. The root cause is insufficient input validation in the web filter database upd...

10CVSS9.7AI score0.01885EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/08/10 8:10 a.m.210 views

CVE-2022-20842

Cisco Small Business RV160/RV260/RV340/RV345 Series routers are affected by CVE-2022-20842, a vulnerability in the web-based management interface caused by insufficient input validation. An unauthenticated, remote attacker could exploit crafted HTTP input to execute arbitrary code with root privi...

9.8CVSS9.7AI score0.0182EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/08/10 8:10 a.m.213 views

CVE-2022-20841

CVE-2022-20841 affects Cisco Small Business RV160/RV260/RV340/RV345 Series Routers. The vulnerability arises from insufficient validation in the Open Plug and Play (PnP) module, enabling an unauthenticated, remote attacker to inject and execute arbitrary commands on the underlying OS, potentially...

9CVSS9.5AI score0.03257EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/05 12:00 a.m.20 views

The vulnerability of the Open Plug and Play (PnP) microprogramming software module of Cisco Small Business routers such as RV160, RV260, RV340, and RV345 is related to errors in processing input data. This vulnerability allows a hacker to execute arbitrary commands in the basic operating system.

The vulnerability of the Open Plug and Play PnP microprogramming software for Cisco Small Business routers such as RV160, RV260, RV340, and RV345 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands on the operating...

10CVSS8.4AI score0.03257EPSS
SaveExploits0References2Affected Software4
CNNVD
CNNVD
added 2022/08/04 12:00 a.m.9 views

Cisco Small Business RV Series Routers 输入验证错误漏洞

Cisco Small Business RV Series Routers is an RV Series router from Cisco. A security vulnerability exists in the Cisco Small Business RV Series Routers that stems from insufficient validation of user input that could allow an unauthenticated, remote attacker to execute arbitrary code or...

9.8CVSS9AI score0.0182EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2022/08/03 11:00 p.m.19 views

CVE-2022-20842

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the...

9.8CVSS7.8AI score0.0182EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2022/08/03 12:00 a.m.13 views

PT-2022-3968 · Cisco · Cisco Small Business Rv345 +3

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, which...

9CVSS9.4AI score0.03257EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2022/08/03 12:00 a.m.13 views

PT-2022-3969 · Cisco · Cisco Small Business Rv340 +7

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN affected versions not specified Description: The issue is related to multiple...

10CVSS9.7AI score0.0182EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2022/05/04 11:00 p.m.7 views

CVE-2022-20753

A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit...

9CVSS6.8AI score0.02081EPSS
SaveExploits0References2
Rows per page
Query Builder