CVE-2021-1609

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details section of this advisory.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cisco:small_business_rv_series_router_firmware:*:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:small_business_rv340:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv340w:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv345:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv345p:-:*:*:*:*:*:*:*

History

12 Aug 2021, 14:12

Type Values Removed Values Added
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown
v2 : 10.0
v3 : 9.8
CPE cpe:2.3:o:cisco:small_business_rv_series_router_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv340w:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv340:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv345p:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:small_business_rv345:-:*:*:*:*:*:*:*
References (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy - (CISCO) https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy - Vendor Advisory

04 Aug 2021, 19:01

Type Values Removed Values Added
New CVE

Information

Published : 2021-08-04 18:15

Updated : 2024-02-04 21:47


NVD link : CVE-2021-1609

Mitre link : CVE-2021-1609

CVE.ORG link : CVE-2021-1609


JSON object : View

Products Affected

cisco

  • small_business_rv345p
  • small_business_rv345
  • small_business_rv340w
  • small_business_rv340
  • small_business_rv_series_router_firmware
CWE
NVD-CWE-noinfo CWE-121

Stack-based Buffer Overflow