Lucene search
+L

182 matches found

BDU FSTEC
BDU FSTEC
added 2021/09/15 12:0 a.m.8 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV340, RV340W, RV345, and RV345P allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a...

8.5CVSS8.4AI score0.02033EPSS
SaveExploits0References3Affected Software5
CNVD
CNVD
added 2021/08/06 12:0 a.m.81 views

Multiple Vulnerabilities in Cisco Small Business RV340 and Cisco Small Business

The Cisco Small Business RV340 and the Cisco Small Business are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. Cisco Small Business RV340 is a router, a hardware device that connects two or more networks and acts as a gateway between networks.Cisco Small Business is a...

10CVSS9.8AI score0.09691EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/08/06 12:0 a.m.37 views

Cisco Small Business RV340 and Cisco Small Business Command Injection Vulnerabilities

The Cisco Small Business RV340 and the Cisco Small Business are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. Cisco Small Business RV340 is a router, a hardware device that connects two or more networks and acts as a gateway between networks.Cisco Small Business is a...

9.8CVSS9.7AI score0.09065EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/04 6:15 p.m.6 views

CVE-2021-1610

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

8.8CVSS7.5AI score0.09065EPSS
SaveExploits0References1
OSV
OSV
added 2021/08/04 6:15 p.m.1 views

CVE-2021-1609

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

9.8CVSS7.3AI score0.09691EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/08/04 5:20 p.m.18 views

CVE-2021-1610 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

9.8CVSS7.5AI score0.09065EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/04 5:20 p.m.89 views

CVE-2021-1610

CVE-2021-1610 affects Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The vulnerability exists in the web-based management interface and can allow an authenticated attacker with root privileges to execute arbitrary commands on the device. Cisco’s advisory notes...

9.8CVSS9.5AI score0.09065EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2021/08/04 5:20 p.m.173 views

CVE-2021-1609

CVE-2021-1609 affects Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The issue arises in the web-based management interface, enabling unauthenticated or authenticated attackers (depending on the CVE) to execute arbitrary code or commands, and in some cases cau...

10CVSS9.7AI score0.09691EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/04 5:20 p.m.42 views

CVE-2021-1609 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

9.8CVSS9.8AI score0.09691EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2021/08/04 12:0 a.m.102 views

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Multiple Vulnerabilities (cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities: - A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an...

10CVSS8.5AI score0.09691EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2021/08/04 12:0 a.m.10 views

Cisco Small Business RV340和Cisco Small Business 命令注入漏洞

The Cisco Small Business RV340 and the Cisco Small Business are both products of Cisco, Inc.The Cisco Small Business RV340 is a router. Cisco Small Business RV340 is a router, a hardware device that connects two or more networks and acts as a gateway between networks.Cisco Small Business is a...

9.8CVSS6.2AI score0.09065EPSS
SaveExploits0References4
Zero Day Initiative
Zero Day Initiative
added 2021/05/11 12:0 a.m.67 views

Cisco RV340 set_snmp usmUserPrivKey Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of JSON-RPC requests. When parsing the usmUserPrivKey property,...

5.5CVSS4.4AI score0.01863EPSS
SaveExploits2References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/11 12:0 a.m.75 views

Cisco RV340 set_snmp usmUserAuthKey Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of JSON-RPC requests. When parsing the usmUserAuthKey property,...

5.5CVSS4.3AI score0.01612EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
added 2021/05/11 12:0 a.m.76 views

Cisco RV340 set_snmp usmUserEngineID Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the processing of JSON-RPC requests. When parsing the usmUserEngineID property...

5.5CVSS4.5AI score0.01612EPSS
SaveExploits1References1
OSV
OSV
added 2021/05/06 1:15 p.m.8 views

CVE-2021-1520

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

6.7CVSS5.9AI score0.0029EPSS
SaveExploits1References1
CVE
CVE
added 2021/05/06 12:51 p.m.61 views

CVE-2021-1520

The CVE-2021-1520 issue affects Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. A local privilege-escalation vulnerability stems from improper sanitization in the internal messaging service, enabling an authenticated attacker with Administrator credentials to run arbitrary co...

7.2CVSS6.5AI score0.0029EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/05/06 12:51 p.m.42 views

CVE-2021-1520 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

6.7CVSS6.8AI score0.0029EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/05/05 4:0 p.m.4 views

CVE-2021-1520

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system OS. This vulnerability exists because an interna...

7.2CVSS6.8AI score0.0029EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/05/05 12:0 a.m.7 views

Cisco 路由器 安全漏洞

The Cisco Router is a router from Cisco USA. A security vulnerability exists in the Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers that could be exploited by an authenticated, local attacker to run arbitrary commands...

7.2CVSS6.8AI score0.0029EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:0 a.m.8 views

The vulnerability in the web interface for managing microprogrammed software routers of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN allows a hacker to execute arbitrary code.

The vulnerability of the web-based management interface for Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN software lies in the deficiencies of the deserialization mechanism. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code...

6.5CVSS6.5AI score0.01612EPSS
SaveExploits1References2Affected Software4
Rows per page
Query Builder