CVE-2021-34730

Cisco RV110W UPnP 0day Analysis Preface UPnP has been a hot topic recently. I happened to have a Cisco RV110W device on hand. In August 2021, Cisco officially disclosed a 0day regarding UPnP in the RV series, but the specific details were not published. So I wanted to debug and exploit this...

VulnCheck KEV: CVE-2021-34730

A vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service DoS...

Critical Flaw Found in Older Cisco Small Business Routers Won't Be Fixed

A critical vulnerability in Cisco Small Business Routers will not be patched by the networking equipment giant, since the devices reached end-of-life in 2019. Tracked as CVE-2021-34730 CVSS score: 9.8, the issue resides in the routers' Universal Plug-and-Play UPnP service, enabling an...

Cisco Small Business routers vulnerable to remote attacks, won’t get a patch

In a security advisory, Cisco has informed users that a vulnerability in the Universal Plug-and-Play UPnP service of Cisco Small Business RV110W, RV130, RV130W, and RV215W routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart...

CVE-2021-34730

creationtimestamp| type| source ---|---|--- 2021-08-19 00:17:06+00:00| seen| https://t.me/cibsecurity/27569 2021-08-19 10:15:20+00:00| seen| https://t.me/codebysec/4855 2021-08-19 17:20:16+00:00| seen| https://t.me/NeKaspersky/1146 2021-08-19 18:21:36+00:00| seen| https://t.me/icscert/479...

CVE-2021-34730

CVE-2021-34730 affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers. It arises from improper validation in the UPnP service, enabling unauthenticated remote code execution as root or a device restart (DoS). The affected devices are end-of-life, and Cisco has not released softwar...