ZDI-CAN-15882: (Pwn2Own) Cisco RV340 upload.cgi sessionid Improper Input Validation Authentication Bypass Vulnerability
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Cisco RV340 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the sessionid parameter provided to the upload.cgi endpoint. The issue results from the lack of proper validation of the user-supplied sessionid cookie. An attacker can leverage this vulnerability to bypass authentication on the system.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RV340W Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of ZDI-CAN-15882?
ZDI-CAN-15882 is reported as a critical vulnerability.
How do I fix ZDI-CAN-15882?
To fix ZDI-CAN-15882, update your Cisco RV340 router firmware to the latest version provided by Cisco.
Who is affected by ZDI-CAN-15882?
ZDI-CAN-15882 affects installations of Cisco RV340 routers that are connected to a network.
Can ZDI-CAN-15882 be exploited remotely?
Yes, ZDI-CAN-15882 can be exploited by network-adjacent attackers without authentication.
What type of vulnerability is ZDI-CAN-15882?
ZDI-CAN-15882 is an authentication bypass vulnerability.
- agent/references
- agent/softwarecombine
- agent/title
- agent/severity
- agent/type
- agent/description
- agent/source
- agent/tags
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-22-410
- alias/ZDI-CAN-15882
- alias/CVE-2022-20705
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/event
- vendor/cisco
- canonical/cisco rv340w firmware