CVE-2021-1609CWE-121

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

Critical · published August 4, 2021

CVSS v3.1
9.8
EPSS
10%
Percentile
95.5
In the wild
Unconfirmed
What it is

🚨 A crafty mix of vulnerabilities in Cisco's RV340 series routers means attackers can execute arbitrary code and cause chaos – all from the comfort of their couch! 🔥 Think of these routers like a restaurant with a backdoor; if someone can sneak in unnoticed, they could change the menu or spoil the food without anyone knowing. That's what this vulnerability allows! An attacker could seize control of your router, running any command they wish, which could lead to a complete denial of service. Imagine your network shutting down or being hijacked, leaving your data vulnerable to malicious intent. It's critical to protect your systems!

Put simply

Think of these routers like a restaurant with a backdoor; if someone can sneak in unnoticed, they could change the menu or spoil the food without anyone knowing. That's what this vulnerability allows! These vulnerabilities allow an attacker to exploit the web-based management interface, executing arbitrary commands or code without proper access controls. This could lead to serious disruptions for any networks utilizing these devices.

What to do

An attacker could seize control of your router, running any command they wish, which could lead to a complete denial of service. Imagine your network shutting down or being hijacked, leaving your data vulnerable to malicious intent. It's critical to protect your systems! Immediately patch your Cisco RV340, RV340W, RV345, and RV345P routers to the latest firmware version provided by Cisco. Review your network settings to ensure unauthorized access is blocked and consider enhancing your firewall rules. 🛡️ You've got this! Act swiftly, and your network will be secure in no time! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09691 · 95.5th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2021-08-04T17:20Z
EPSS history
Timeline
  • 04 AUG 17:20Z
    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities
    cvelistv5