cisco-sa-sb-rv-rcedos-7HjP74jD: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution and Denial of Service Vulnerability

Published Jan 11, 2023

Updated

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code or cause the web-based management process on the device to restart unexpectedly,

Affected Software

4 affected components

Cisco RV340

Cisco RV340W

Cisco RV345

Cisco RV345P

Event History

Jan 11, 2023

Advisory Published

04:00 PM

Data Sourced

04:00 PM

DescriptionSeverityWeakness

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-20007

Frequently Asked Questions

What is the severity of cisco-sa-sb-rv-rcedos-7HjP74jD?

The severity of cisco-sa-sb-rv-rcedos-7HjP74jD is rated as high due to the potential for remote code execution.

How do I fix cisco-sa-sb-rv-rcedos-7HjP74jD?

To fix cisco-sa-sb-rv-rcedos-7HjP74jD, upgrade to the latest firmware version provided by Cisco.

Which devices are affected by cisco-sa-sb-rv-rcedos-7HjP74jD?

The affected devices include Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers.

What type of attack is possible with cisco-sa-sb-rv-rcedos-7HjP74jD?

An authenticated remote attacker can exploit cisco-sa-sb-rv-rcedos-7HjP74jD to execute arbitrary code or restart the management process.

Is authentication required to exploit cisco-sa-sb-rv-rcedos-7HjP74jD?

Yes, exploitation of cisco-sa-sb-rv-rcedos-7HjP74jD requires authentication to the web-based management interface.