CVE-2021-1308CWE-119

Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities

High · published April 8, 2021

CVSS v3.1
7.4
EPSS
0%
Percentile
36.6
In the wild
Unconfirmed
What it is

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00434 · 36.6th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2021-04-08T04:05Z
EPSS history
Timeline
  • 08 APR 04:05Z
    Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities
    cvelistv5