ZDI-22-410: (Pwn2Own) Cisco RV340 upload.cgi sessionid Improper Input Validation Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Cisco RV340 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the sessionid parameter provided to the upload.cgi endpoint. The issue results from the lack of proper validation of the user-supplied sessionid cookie. An attacker can leverage this vulnerability to bypass authentication on the system.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RV340W Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-22-410?
The severity of ZDI-22-410 is considered high due to the potential for unauthenticated access to the router.
How do I fix ZDI-22-410?
To fix ZDI-22-410, update your Cisco RV340 router to the latest firmware version provided by Cisco.
Who is affected by ZDI-22-410?
ZDI-22-410 affects installations of Cisco RV340 routers that have not been patched against this vulnerability.
Can ZDI-22-410 be exploited remotely?
Yes, ZDI-22-410 can be exploited by network-adjacent attackers without authentication.
What are the potential impacts of ZDI-22-410?
The potential impacts of ZDI-22-410 include unauthorized access to router functions and exposure of sensitive information.
- agent/references
- agent/type
- agent/softwarecombine
- agent/title
- agent/severity
- agent/description
- agent/source
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-410
- alias/ZDI-CAN-15882
- alias/CVE-2022-20705
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- vendor/cisco
- canonical/cisco rv340w firmware