Multiple vulnerabilities in Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers
| Risk | Critical |
| Patch available | YES |
| Number of vulnerabilities | 14 |
| CVE-ID | CVE-2022-20712 CVE-2022-20711 CVE-2022-20710 CVE-2022-20709 CVE-2022-20749 CVE-2022-20707 CVE-2022-20708 CVE-2022-20706 CVE-2022-20705 CVE-2022-20704 CVE-2022-20703 CVE-2022-20702 CVE-2022-20701 CVE-2022-20700 |
| CWE-ID | CWE-119 CWE-20 CWE-755 CWE-434 CWE-78 CWE-287 CWE-295 CWE-347 CWE-285 |
| Exploitation vector | Network |
| Public exploit |
Public exploit code for vulnerability #6 is available. Vulnerability #7 is being exploited in the wild. Public exploit code for vulnerability #9 is available. Vulnerability #11 is being exploited in the wild. Vulnerability #13 is being exploited in the wild. Vulnerability #14 is being exploited in the wild. |
| Vulnerable software Subscribe |
Cisco RV340 Dual WAN Gigabit VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco RV345 Dual WAN Gigabit VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco RV345P Dual WAN Gigabit VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains information about 14 vulnerabilities.
1) Buffer overflow
EUVDB-ID: #VU60260
Risk: High
CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20712
CWE-ID:
CWE-119 - Memory corruption
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTTP requests. A remote attacker can send a specially crafted HTTP request to the device, trigger memory corruption and execute arbitrary code on the target system with non-root privileges.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Input validation error
EUVDB-ID: #VU60259
Risk: High
CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20711
CWE-ID:
CWE-20 - Improper input validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to overwrite arbitrary files on the system.
The vulnerability exists due to insufficient validation of user-supplied input for specific components of the web UI. A remote non-authenticated attacker can send specially crafted HTTP request to the affected device and overwrite certain files, served by the web UI process. Successful exploitation of the vulnerability may allow an attacker to exfiltrate information. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
3) Improper Handling of Exceptional Conditions
EUVDB-ID: #VU60258
Risk: Medium
CVSSv3.1: 5.1 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20710
CWE-ID:
CWE-755 - Improper Handling of Exceptional Conditions
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to to erroneously handled exceptions during failed login attempts in the login functionality of the web-based management interface.. A remote non-authenticated attacker can send specially crafted HTTP requests to the affected device and prevent users from logging in. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
4) Arbitrary file upload
EUVDB-ID: #VU60257
Risk: Critical
CVSSv3.1: 8.7 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20709
CWE-ID:
CWE-434 - Unrestricted Upload of File with Dangerous Type
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform a denial of service (DoS) attack or compromise the affected system.
The vulnerability exists due to improper access restrictions in the web-based management interface. A remote non-authenticated attacker can upload arbitrary files to the device.
Successful exploitation of the vulnerability may allow an attacker to perform a DoS attack by filling up all available space on the device or use the uploaded files in further attacks. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
5) OS Command Injection
EUVDB-ID: #VU60256
Risk: Medium
CVSSv3.1: 6.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20749
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation in the web-based management interface. A remote non-authenticated attacker can send a specially crafted request to the affected device to inject and execute arbitrary commands on the underlying operating system.
Install updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
6) OS Command Injection
EUVDB-ID: #VU60255
Risk: Medium
CVSSv3.1: 6.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:F/RL:O/RC:C]
CVE-ID: CVE-2022-20707
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation within the handling of file-copy JSON RPC requests in the web-based management interface. A remote non-authenticated attacker can send a specially crafted request to the affected device to inject and execute arbitrary commands on the underlying operating system.
Install updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
http://www.zerodayinitiative.com/advisories/ZDI-22-419/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.
7) OS Command Injection
EUVDB-ID: #VU60254
Risk: High
CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2022-20708
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation within the handling of the update-clients method in the web-based management interface. A remote non-authenticated attacker can send a specially crafted request to the affected device to inject and execute arbitrary commands on the underlying operating system.
Install updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
http://www.zerodayinitiative.com/advisories/ZDI-22-417/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
8) OS Command Injection
EUVDB-ID: #VU60253
Risk: Medium
CVSSv3.1: 7.2 [CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20706
CWE-ID:
CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to execute arbitrary shell commands on the target system.
The vulnerability exists due to improper input validation in the Open Plug and Play (PnP) module of Cisco Small Business RV Series Routers. A remote unauthenticated attacker can execute arbitrary commands on the underlying Linux operating system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system but requires a man-in-the-middle position or having an established foothold on a specific network device that is connected to the vulnerable router.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
http://www.zerodayinitiative.com/advisories/ZDI-22-418/
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
9) Improper Authentication
EUVDB-ID: #VU60252
Risk: High
CVSSv3.1: 8.3 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C]
CVE-ID: CVE-2022-20705
CWE-ID:
CWE-287 - Improper Authentication
Exploit availability: Yes
DescriptionThe vulnerability allows a remote attacker to bypass authentication process.
The vulnerability exists due to an error in the session management of the web UI. A remote non-authenticated attacker can brute force to determine a current session identifier and then reuse it to take over an ongoing session or by crafting a new, valid session identifier and bypassing the whole authentication mechanism.
Successful exploitation of the vulnerability may allow an attacker to compromise the affected device. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability. However, a fully functional exploit for this vulnerability is available.
10) Improper Certificate Validation
EUVDB-ID: #VU60251
Risk: Medium
CVSSv3.1: 4.7 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20704
CWE-ID:
CWE-295 - Improper Certificate Validation
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to perform MitM attack.
The vulnerability exists due to improper validation of the TLS server certificate that is received when establishing a connection to specific remote servers. A remote attacker can view or alter information that is shared between an affected device and specific Cisco servers , e.g. cloudsso.cisco.com and api.cisco.com. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
11) Improper Verification of Cryptographic Signature
EUVDB-ID: #VU60250
Risk: Low
CVSSv3.1: 7.3 [CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2022-20703
CWE-ID:
CWE-347 - Improper Verification of Cryptographic Signature
Exploit availability: No
DescriptionThe vulnerability allows an attacker to compromise the affected device.
The vulnerability exists due to improper cryptographic signature verification of software images as they are installed on an affected device.An attacker with physical access to device can install and boot a malicious software image or execute unsigned binaries on an affected device. MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
12) Improper Authorization
EUVDB-ID: #VU60249
Risk: Low
CVSSv3.1: 7.1 [CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: CVE-2022-20702
CWE-ID:
CWE-285 - Improper Authorization
Exploit availability: No
Description
The vulnerability allows a local user to escalate privileges on the system.
Install updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
http://www.zerodayinitiative.com/advisories/ZDI-22-420/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
The attacker would have to login to the system and perform certain actions in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
13) Improper Authorization
EUVDB-ID: #VU60248
Risk: Critical
CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2022-20701
CWE-ID:
CWE-285 - Improper Authorization
Exploit availability: No
Description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to missing authorization in the web-management interface. A remote non-authenticated attacker can execute arbitrary code with root privileges.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
14) Improper Authorization
EUVDB-ID: #VU60247
Risk: Critical
CVSSv3.1: 9.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H/E:H/RL:O/RC:C]
CVE-ID: CVE-2022-20700
CWE-ID:
CWE-285 - Improper Authorization
Exploit availability: No
Description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to missing authorization in the web-management interface. A remote non-authenticated attacker can execute arbitrary code with root privileges.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router: 1.0.01.16 - 1.0.03.24
Cisco RV345 Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.3.17
Cisco RV345P Dual WAN Gigabit VPN Router: 1.0.0.33 - 1.0.1.16
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
Yes. This vulnerability is being exploited in the wild.
