CVE-2021-1609

CVE-2021-1609 affects Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The issue arises in the web-based management interface, enabling unauthenticated or authenticated attackers (depending on the CVE) to execute arbitrary code or commands, and in some cases cau...

CVE-2021-1602

CVE-2021-1602 affects Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W routers. Root cause: insufficient input validation in the web-based management interface allows an unauthenticated attacker to send crafted requests that execute arbitrary commands on the device’s operating system...

CVE-2024-20381

CVE-2024-20381 involves a JSON-RPC API authorization bypass in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD, used by web interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN routers. The root cause is improper authorization checks on the API, allowing an authenticate...

CVE-2021-1610

CVE-2021-1610 affects Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. The vulnerability exists in the web-based management interface and can allow an authenticated attacker with root privileges to execute arbitrary commands on the device. Cisco’s advisory notes...

CVE-2017-6620

CVE-2017-6620 affects Cisco CVR100W Wireless-N VPN Router. A vulnerability in the Remote Management ACL allows an unauthenticated, remote attacker to bypass the remote management ACL due to an incorrect ACL decision during ingress to the remote management interface. Impact is bypass of the config...