Cisco · Cisco Small Business Rv042 Dual Wan Vpn Routers · CVE-2020-3431
**Name of the Vulnerable Software and Affected Versions**
Cisco Small Business RV042 Dual WAN VPN Routers (affected versions not specified)
Cisco Small Business RV042G Dual Gigabit WAN VPN Routers (affected versions not specified)
**Description**
A vulnerability in the web-based management interface could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. The issue is due to insufficient validation of user-supplied input. An attacker could exploit this by persuading a user to click a crafted link, potentially allowing the execution of arbitrary script code or access to sensitive browser-based information.
**Recommendations**
For Cisco Small Business RV042 Dual WAN VPN Routers, update to the latest software version that addresses this vulnerability.
For Cisco Small Business RV042G Dual Gigabit WAN VPN Routers, update to the latest software version that addresses this vulnerability.
As a temporary workaround, consider restricting access to the web-based management interface until a patch is applied.