CVE-2021-1473: Cisco Small Business RV Series Routers Vulnerabilities
First published: Thu Apr 08 2021(Updated: )
Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Rv340 Firmware | <1.0.03.21 | |
| Cisco RV340 | ||
| Cisco Rv340w Firmware | <1.0.03.21 | |
| Cisco Rv340w | ||
| Cisco Rv345 Firmware | <1.0.03.21 | |
| Cisco Rv345 | ||
| Cisco Rv345p Firmware | <1.0.03.21 | |
| Cisco Rv345p |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for the Cisco Small Business RV Series Routers vulnerabilities?
The vulnerability ID is CVE-2021-1473.
What is the severity rating for CVE-2021-1473?
The severity rating for CVE-2021-1473 is critical.
What are the affected software versions for CVE-2021-1473?
The affected software versions for CVE-2021-1473 are Cisco Rv340 Firmware up to and excluding version 1.0.03.21, Cisco Rv340w Firmware up to and excluding version 1.0.03.21, Cisco Rv345 Firmware up to and excluding version 1.0.03.21, and Cisco Rv345p Firmware up to and excluding version 1.0.03.21.
What are the potential impacts of the vulnerabilities in CVE-2021-1473?
The potential impacts of the vulnerabilities in CVE-2021-1473 include execution of arbitrary commands by a remote attacker, bypassing authentication, and uploading files on an affected device.
Where can I find more information about CVE-2021-1473?
You can find more information about CVE-2021-1473 in the following references: [Packetstorm Security](http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html), [Full Disclosure](http://seclists.org/fulldisclosure/2021/Apr/39), and [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx).
- collector/nvd-index
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/author
- agent/severity
- agent/title
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco rv340 firmware
- canonical/cisco rv340
- canonical/cisco rv340w firmware
- canonical/cisco rv340w
- canonical/cisco rv345 firmware
- canonical/cisco rv345
- canonical/cisco rv345p firmware
- canonical/cisco rv345p