CVE-2021-1308: Cisco Small Business RV Series Routers Link Layer Discovery Protocol Vulnerabilities
Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-1308?
The severity of CVE-2021-1308 is high.
What is the affected software for CVE-2021-1308?
The affected software for CVE-2021-1308 is Cisco Small Business RV Series Routers with specific firmware versions.
How can an attacker exploit CVE-2021-1308?
An unauthenticated, adjacent attacker can execute arbitrary code or cause an affected router to leak system memory or reload.
How can I fix CVE-2021-1308?
Cisco has released a security advisory with mitigation steps for CVE-2021-1308. Please refer to the advisory for instructions.
Where can I find more information about CVE-2021-1308?
You can find more information about CVE-2021-1308 in the Cisco Security Advisory.