⚠ Exploited in the wild
Exploitation observed in the wild. Not yet on CISA KEV.

CVE-2021-1472

CWE-119 — Buffer OverflowCWE-287 — Improper AuthenticationCWE-284 — Improper Access ControlCWE-133511 documents11 sources
Severity
9.8CRITICAL
EPSS
91.3%
top 0.34%
CISA KEV
Not in KEV
Exploit
Exploited in wild
Active exploitation observed
Affected products
10
Cisco Rv160 FirmwareCisco Rv160w FirmwareCisco Rv260 Firmware+7 more
Timeline
PublishedApr 8
Latest updateOct 1

Description

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages10 packages

▶NVDcisco/rv160_firmware< 1.0.01.03
▶NVDcisco/rv260_firmware< 1.0.01.03
▶NVDcisco/rv340_firmware< 1.0.03.21
▶NVDcisco/rv345_firmware< 1.0.03.21

🔴Vulnerability Details

3
GHSA
GHSA-9f7f-qvqp-2hf3: Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers↗2022-05-24
▶
CVEList
Cisco Small Business RV Series Routers Vulnerabilities↗2021-04-08
▶
VulnCheck
Cisco RV Series Routers Improper Restriction of Operations within the Bounds of a Memory Buffer↗2021
▶

💥Exploits & PoCs

2
Nuclei
Cisco Small Business RV Series - OS Command Injection
▶
Metasploit
Cisco Small Business RV Series Authentication Bypass and Command Injection↗
▶

📋Vendor Advisories

3
Red Hat
kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd↗2025-10-01
▶
Oracle
Oracle Oracle Systems Risk Matrix: Operating System Image — CVE-2020-1472↗2021-04-15
▶
Cisco
Cisco Small Business RV Series Routers Vulnerabilities↗2021-04-07
▶

💬Community

1
Bugzilla
CVE-2021-4460 kernel: Linux kernel: integer overflow and information disclosure via undefined shift operation in drm/amdkfd↗2025-10-01
▶
CVE-2021-1472 (CRITICAL CVSS 9.8) | Multiple vulnerabilities exist in t | cvebase.io