cisco-sa-rv-osinj-rce-pwTkPCJv: Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory. Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-rv-osinj-rce-pwTkPCJv?
The severity of cisco-sa-rv-osinj-rce-pwTkPCJv is critical due to the potential for remote code execution.
How do I fix cisco-sa-rv-osinj-rce-pwTkPCJv?
To fix cisco-sa-rv-osinj-rce-pwTkPCJv, apply the latest firmware update provided by Cisco for the RV340 Series Routers.
What are the potential impacts of cisco-sa-rv-osinj-rce-pwTkPCJv?
The potential impacts of cisco-sa-rv-osinj-rce-pwTkPCJv include the execution of arbitrary commands by an unauthenticated remote attacker.
Which devices are affected by cisco-sa-rv-osinj-rce-pwTkPCJv?
The devices affected by cisco-sa-rv-osinj-rce-pwTkPCJv are the Cisco Small Business RV340 Series Routers.
Is authentication required for exploitation of cisco-sa-rv-osinj-rce-pwTkPCJv?
No, authentication is not required for exploitation of cisco-sa-rv-osinj-rce-pwTkPCJv, allowing unauthenticated attackers to exploit the vulnerability.