PT-2023-9614 · Cisco · Cisco Small Business Rv042G+3

K0Mor3B1

·

Published

2023-11-08

·

Updated

2024-10-08

·

CVE-2024-20517

CVSS v3.1

6.8

Medium

VectorAV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified)
Description A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. This is due to improper validation of user input in incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. The vulnerability may also be related to a buffer overflow in memory due to insufficient input validation when processing HTTP packets, potentially allowing a remote attacker to execute arbitrary code or cause a denial of service by sending a specially crafted HTTP request.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787CWE-122

Related Identifiers

BDU:2024-08800
CVE-2024-20517

Affected Products

Cisco Small Business Rv042
Cisco Small Business Rv042G
Cisco Small Business Rv320
Cisco Small Business Rv325