PT-2023-9616 · Cisco · Rv320+3
K0Mor3B1
·
Published
2023-11-08
·
Updated
2024-10-08
·
CVE-2024-20522
CVSS v3.1
6.8
Medium
| Vector | AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Cisco Small Business RV042, RV042G, RV320, and RV325 Routers (affected versions not specified)
Description
A vulnerability in the web-based management interface could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. This is due to improper validation of user input in incoming HTTP packets. An attacker could exploit this by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition. The vulnerability may also allow an attacker to execute arbitrary code.
Recommendations
For Cisco Small Business RV042, RV042G, RV320, and RV325 Routers, consider disabling access to the web-based management interface until a patch is available.
Restrict access to the management interface to minimize the risk of exploitation.
Avoid using the web-based management interface for critical operations until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Memory Corruption
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Rv042
Rv042G
Rv320
Rv325