What is the severity of ZDI-CAN-15940?

The severity of ZDI-CAN-15940 is categorized as high due to its potential to allow local privilege escalation on Cisco RV340 routers.

How do I fix ZDI-CAN-15940?

To fix ZDI-CAN-15940, update the firmware of the affected Cisco RV340 router to the latest version released by Cisco.

Who is affected by ZDI-CAN-15940?

ZDI-CAN-15940 affects installations of Cisco RV340 routers specifically if they have low-privileged code execution capabilities.

What type of attack does ZDI-CAN-15940 involve?

ZDI-CAN-15940 involves local attack vectors that require prior access to execute low-privileged code to exploit the vulnerability.

Is there a workaround for ZDI-CAN-15940?

Currently, there are no known workarounds for ZDI-CAN-15940, and the recommended action is to apply the firmware update.

Vulnerability/
ZDI-CAN-15940

high

7.8

2/2/2025

ZDI-CAN-15940: (Pwn2Own) Cisco RV340 JSON RPC file-copy Command Injection Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Cisco RV340 routers. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of file-copy JSON RPC requests. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of root.

Affected Software	Affected Version	How to fix
Cisco RV340W Firmware

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of ZDI-CAN-15940?
The severity of ZDI-CAN-15940 is categorized as high due to its potential to allow local privilege escalation on Cisco RV340 routers.
How do I fix ZDI-CAN-15940?
To fix ZDI-CAN-15940, update the firmware of the affected Cisco RV340 router to the latest version released by Cisco.
Who is affected by ZDI-CAN-15940?
ZDI-CAN-15940 affects installations of Cisco RV340 routers specifically if they have low-privileged code execution capabilities.
What type of attack does ZDI-CAN-15940 involve?
ZDI-CAN-15940 involves local attack vectors that require prior access to execute low-privileged code to exploit the vulnerability.
Is there a workaround for ZDI-CAN-15940?
Currently, there are no known workarounds for ZDI-CAN-15940, and the recommended action is to apply the firmware update.

agent/references
agent/softwarecombine
agent/title
agent/severity
agent/type
agent/description
agent/source
agent/tags
collector/zdi-advisory
source/ZDI
alias/ZDI-22-419
alias/ZDI-CAN-15940
alias/CVE-2022-20707
agent/software-canonical-lookup
agent/software-canonical-lookup-request
agent/event
vendor/cisco
canonical/cisco rv340w firmware

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.