CVE-2020-3451Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Rv340 Firmware

Severity
4.7MEDIUMNVD
EPSS
0.5%
top 33.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedSep 4
Latest updateMay 24

Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 1.2 | Impact: 3.4

Affected Packages5 packages

🔴Vulnerability Details

3
GHSA
GHSA-jqfg-vvx5-35cc: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attac2022-05-24
CVEList
Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities2020-09-04
VulnCheck
Cisco rv340w_firmware Improper Restriction of Operations within the Bounds of a Memory Buffer2020

📋Vendor Advisories

1
Cisco
Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities2020-09-02
CVE-2020-3451 — Cisco Rv340 Firmware vulnerability | cvebase