CVE-2024-20393: Improper Authorization

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interfa...

CVE-2024-20470: Improper Neutralization of Expression/Command Delimiters

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have...

CVE-2023-20007: Buffer Copy without Checking Size of Input

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly,...

CVE-2022-20842: Buffer Copy without Checking Size of Input

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service DoS condition on an affected device. For more information about these vulnerabilities, see the...

PT-2022-2504

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340 and RV345 Routers affected versions not specified Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This...

CVE-2022-20799: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

CVE-2022-20801: Improper Neutralization of Special Elements used in a Command

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

CVE-2022-20753: Stack-based Buffer Overflow

A vulnerability in web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit...

CVE-2022-20705

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned softwa...

PT-2022-2296

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, RV345P versions affected versions not specified Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers versions affected versions not specified Description The issue is related to the lack...

PT-2022-2289

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, RV345P versions affected versions not specified Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue exists due to insufficient inpu...

PT-2022-2290

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and...

PT-2022-2288

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345, RV345P affected versions not specified Description The issue is...

PT-2022-2307

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers affected versions not specified Description The issue is related to multiple vulnerabilities in the Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers. These...

PT-2021-3783

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, and RV345P affected versions not specified Description The issue is related to multiple vulnerabilities in the web-based management interface of the affected routers. These vulnerabilities could allow...

CVE-2021-1610: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

PT-2021-3997

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description The vulnerability in the web-based management interface of the affected routers is related to errors in handling HTT...

CVE-2021-1609: Stack-based Buffer Overflow

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service DoS condition Execute arbitrary commands For more...

CVE-2020-3453: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...

CVE-2020-3451: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system OS as a restricted user. For more information...