PT-2021-2569 · Cisco · Cisco Rv345+3

T Shiomitsu · Published 2021-04-07 · Updated 2021-06-04 · CVE-2021-1414

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers (affected versions not specified)

Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These vulnerabilities exist because HTTP requests are not properly validated, which could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device. The vulnerabilities are also related to deficiencies in the deserialization mechanism.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2021-02020

CVE-2021-1414

ZDI-21-559

Affected Products

Cisco Rv340

Cisco Rv340W

Cisco Rv345

Cisco Rv345P

References · 8

• https://zerodayinitiative.com/advisories/ZDI-21-559 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-1414 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-02020 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-1414 · Security Note
• https://t.me/cvenotify/15557 · Telegram Post
• https://t.me/cvenotify/12893 · Telegram Post
• https://t.me/cvenotify/12910 · Telegram Post