CVE-2021-1472CWE-119

Cisco Small Business RV Series Routers Vulnerabilities

Medium · published April 8, 2021

Patch now

High probability of exploitation

CVSS calls it medium at 5.3. It sits in the 99.4th percentile for exploit probability.

CVSS v3.1

5.3

EPSS

72%

Percentile

99.4

In the wild

Unconfirmed

What it is

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.72028 · 99.4th percentile
Weakness: CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published: 2021-04-08T04:06Z

EPSS history

Timeline

08 APR 04:06Z
Cisco Small Business RV Series Routers Vulnerabilities
cvelistv5