PT-2024-5457 · Cisco · Cisco Rv340+1

Jacob Baines · Published 2024-07-17 · Updated 2024-08-26 · CVE-2024-20416

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers (affected versions not specified)

Description A vulnerability in the upload module could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This issue is due to insufficient boundary checks when processing specific HTTP requests. An attacker could exploit this by sending crafted HTTP requests to an affected device, potentially allowing the execution of arbitrary code as the root user on the underlying operating system.

Recommendations For Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers, consider disabling the upload module as a temporary workaround until a patch is available. Restrict access to the device to minimize the risk of exploitation. Avoid using the vulnerable upload functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-130

Related Identifiers

BDU:2024-06106

CVE-2024-20416

Affected Products

Cisco Rv340

Cisco Rv345

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-20416 · Security Note
• https://bdu.fstec.ru/vul/2024-06106 · Security Note
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-7pqFU2e · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20416 · Note
• https://vuldb.com/?id.271846 · Note
• https://twitter.com/Komodosec/status/1828086062595612733 · Twitter Post
• https://t.me/cvedetector/1107 · Telegram Post
• https://t.me/cvenotify/86549 · Telegram Post
• https://t.me/pentestingnews/49316 · Telegram Post