PT-2021-3838 · Cisco · Cisco Small Business Rv130+3

Quentin Kaiser

·

Published

2021-08-18

·

Updated

2025-07-23

·

CVE-2021-34730

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers (affected versions not specified)
Description A vulnerability in the Universal Plug-and-Play (UPnP) service of the affected routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

DoS

Stack Overflow

Memory Corruption

Weakness Enumeration

CWE-121CWE-787

Related Identifiers

BDU:2021-04168
CVE-2021-34730

Affected Products

Cisco Small Business Rv110W
Cisco Small Business Rv130
Cisco Small Business Rv130W
Cisco Small Business Rv215W