cisco-sa-sb-dos-ZN5GvNH7: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers SSL Denial of Service Vulnerability
A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL connection to the targeted device. A successful exploit could allow the attacker to cause a reload, resulting in a DoS condition. Cisco has released software updates that address the vulnerability described in this advisory. There are no workarounds that address this vulnerability. This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-dos-ZN5GvNH7
Credit
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-sb-dos-ZN5GvNH7?
The severity of cisco-sa-sb-dos-ZN5GvNH7 is categorized as a denial of service (DoS) vulnerability.
How do I fix cisco-sa-sb-dos-ZN5GvNH7?
To fix cisco-sa-sb-dos-ZN5GvNH7, upgrade to the latest firmware provided by Cisco for the affected devices.
Which devices are affected by cisco-sa-sb-dos-ZN5GvNH7?
The devices affected by cisco-sa-sb-dos-ZN5GvNH7 include Cisco RV340, RV340W, RV345, and RV345P routers.
What type of attack is possible with cisco-sa-sb-dos-ZN5GvNH7?
cisco-sa-sb-dos-ZN5GvNH7 allows unauthenticated remote attackers to cause a device to restart unexpectedly.
Is there a workaround for cisco-sa-sb-dos-ZN5GvNH7?
There are no specific workarounds mentioned for cisco-sa-sb-dos-ZN5GvNH7, so updating firmware is recommended.