Cisco Small Business RV Series Routers Multiple Vulnerabilities (cisco-sa-sb-rv-bypass-inject-Rbhgvfdx)

According to its self-reported version, Cisco Small Business RV Series Router Firmware is affected by multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, RV260W, RV340, RV340W, RV345 and RV345P Routers which could allow an...

CVE-2021-1415

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These...

CVE-2021-1472

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

Authentication flaw

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

Cross site scripting

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface do...

CVE-2021-1459

The CVE-2021-1459 issue affects Cisco Small Business RV110W, RV130, RV130W, and RV215W routers, where an unauthenticated remote attacker can exploit improper input validation in the web-based management interface to execute arbitrary code as root. The root cause is input validation flaws in the m...

CVE-2021-1413 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Authenticated Remote Code Execution Vulnerabilities

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These...

CVE-2021-1463: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface do...

CVE-2021-1472: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

CVE-2021-1409: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1408: Improper Neutralization of Special Elements used in an SQL Command

Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisco Unified Communications Manager Session Management Edition Unified CM SME, and Cisco Unity Connection...

CVE-2021-1473: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details...

CVE-2021-1459: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the...

PT-2021-2575

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2568

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to the web-based management interface of the affected devices, where multiple vulnerabilities could allow an...

PT-2021-2571

Name of the Vulnerable Software and Affected Versions: Cisco Unified Intelligence Center affected versions not specified Cisco Unified Contact Center Express affected versions not specified Description: The issue is related to the web-based management interface of the affected software, where...

PT-2021-2573

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2572

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2574

Name of the Vulnerable Software and Affected Versions Cisco Unified Communications Manager versions affected versions not specified Cisco Unified Communications Manager IM & Presence Service versions affected versions not specified Cisco Unified Communications Manager Session Management Edition...

PT-2021-2569

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These...