CVE-2020-3453: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...

Cisco Small Business RV340 Series Routers Firmware < 1.0.03.19 Command Injection and RCE (cisco-sa-rv-osinj-rce-pwTkPCJv)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is prior to 1.0.03.19. It is, therefore, affected by multiple vulnerabilities in the web-based management interface that can allow an authenicated, remote attacker with administrative credentials to execute...

CVE-2020-3451: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...

PT-2020-3851 · Cisco · Cisco Small Business Rv340 Series

Name of the Vulnerable Software and Affected Versions: Cisco Small Business RV340 Series versions prior to 1.0.03.19 Cisco Small Business RV340 Series version 1.0.03.18 and earlier Description: The vulnerability is related to a buffer overflow in the memory of the web-based management interface o...

Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information about these vulnerabilities, s...

The vulnerability of the implementation of the VPN Secure Sockets Layer (SSL) function in the microprogramming software for Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345, and Cisco Small Business RV345P routers allows a perpetrator to execute arbitrary code or cause service interruptions.

The vulnerability of the VPN Secure Sockets Layer SSL implementation in microprogramming software for Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345, and Cisco Small Business RV345P routers exists due to insufficient validation of input data. Exploiting this...

Arbitrary Code Execution Vulnerability in Multiple Cisco Products

The Cisco RV340 Dual WAN Gigabit VPN Router is a small VPN device. An arbitrary code execution vulnerability exists in the Secure Socket Layer SSL VPN feature in multiple Cisco products, which can be exploited by remote attackers with a specially crafted request to execute arbitrary code or cause...

CVE-2020-3357

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the device to reload, resulting in a denial of...

CVE-2020-3358 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability

A vulnerability in the Secure Sockets Layer SSL VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service DoS condition. The vulnerability is due to a lack of proper input validation...

CVE-2020-3357: Improper Input Validation

A vulnerability in the Secure Sockets Layer SSL VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the device to reload, resulting in a denial of...

The vulnerabilities of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 allow attackers to enhance their privileges.

The vulnerability of the microprogramming software of Cisco Small Business RV160, Cisco Small Business RV260, and Cisco Small Business RV340 is related to the use of strictly encrypted passwords for user roles such as root, debug-admin, cisco, admin, and guest. Exploiting this vulnerability allow...

CVE-2017-6784

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...

CVE-2017-6784

The CVE-2017-6784 issue affects Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers. The vulnerability arises in the web interface where sensitive data can be exposed in HTTP responses due to Cisco WebEx Meetings not adequately protecting data when replying to web requests. An unauthentic...

CVE-2017-6784: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...

PT-2017-17318

Name of the Vulnerable Software and Affected Versions Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers versions 1.0.0.30, 1.0.0.33, 1.0.1.9, 1.0.1.16 Description A vulnerability in the web interface could allow an unauthenticated, remote attacker to access sensitive data. The attacker...

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to Cisco...