ZDI-20-1101: Cisco RV340 upload.cgi Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Cisco RV340 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the fileparam parameter provided to the upload.cgi endpoint. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the www-data user.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-20-1101?
The severity of ZDI-20-1101 is high as it allows network-adjacent attackers to execute arbitrary code on affected Cisco RV340 routers.
How do I fix ZDI-20-1101?
To fix ZDI-20-1101, ensure your Cisco RV340 router is updated to the latest firmware version provided by Cisco.
What versions of the Cisco RV340 are affected by ZDI-20-1101?
ZDI-20-1101 affects all versions of Cisco RV340 routers prior to the security updates addressing this vulnerability.
Can ZDI-20-1101 be exploited remotely?
No, ZDI-20-1101 requires authentication, meaning the attacker must have valid credentials to exploit the vulnerability.
What type of attack does ZDI-20-1101 facilitate?
ZDI-20-1101 facilitates arbitrary code execution, potentially allowing full control of the device by the attacker.