Severity
7.2HIGH
EPSS
0.4%
top 37.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 4
Latest updateJan 29

Description

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful ex

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

🔴Vulnerability Details

4
GHSA
NYUCCL psiTurk IS vulnerable to Improper Neutralization of Special Elements2023-01-29
GHSA
GHSA-68w8-f4j3-2jrq: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could all2022-05-24
GHSA
Code injection in RazorEngine2022-03-07
CVEList
Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities2021-02-04

📋Vendor Advisories

2
Red Hat
pug: user provided objects as input to pug templates can achieve remote code execution2021-02-28
Cisco
Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities2021-02-03

🕵️Threat Intelligence

2
Talos
Vulnerability Spotlight: Use-after-free vulnerabilities in Foxit PDF Reader2021-07-27
Talos
Vulnerability Spotlight: Use-after-free vulnerabilities in Foxit PDF Reader2021-07-27
CVE-2021-1336 (HIGH CVSS 7.2) | Multiple vulnerabilities in the web | cvebase.io