CVE-2021-1610CWE-121

Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

Critical · published August 4, 2021

CVSS v3.1
9.8
EPSS
9%
Percentile
95.3
In the wild
Unconfirmed
What it is

🚨 A crafty combo of web vulnerabilities lets attackers execute arbitrary code on Cisco's VPN routers—think of it as hackers having the keys to your digital fortress! 🔥 Picture a hotel with an open back door; anyone could sneak in and mess with the reservation system. That's what these vulnerabilities allow—unauthorized access that could lead to chaos in your network management! An attacker could waltz right in and execute any commands they choose, potentially crippling your network with a denial of service! This means sensitive data could be compromised, and your operations might be brought to a standstill—absolutely devastating!

Put simply

Picture a hotel with an open back door; anyone could sneak in and mess with the reservation system. That's what these vulnerabilities allow—unauthorized access that could lead to chaos in your network management! These vulnerabilities in the Cisco Small Business RV340 series routers' web management interface allow attackers to execute arbitrary commands and cause a denial of service, severely impacting network integrity.

What to do

An attacker could waltz right in and execute any commands they choose, potentially crippling your network with a denial of service! This means sensitive data could be compromised, and your operations might be brought to a standstill—absolutely devastating! Immediately patch to the latest firmware version offered by Cisco to close these vulnerabilities. Regularly audit your network settings and management interfaces to bolster your defenses and ensure access controls are strictly enforced. You've got this! By following these steps, you're one step closer to securing your digital environment! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.09065 · 95.3th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2021-08-04T17:20Z
EPSS history
Timeline
  • 04 AUG 17:20Z
    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities
    cvelistv5