CVE-2024-20470

CWE-146CWE-2854 documents4 sources
Severity
7.2HIGH
EPSS
0.5%
top 33.58%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Cisco Cisco Small Business RV Series Router FirmwareCisco Rv340 Dual WAN Gigabit VPN Router FirmwareCisco Rv340w Dual WAN Gigabit Wireless-ac VPN Router Firmware+2 more
Timeline
PublishedOct 2

Description

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have valid admin credentials. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by sending…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HExploitability: 1.2 | Impact: 5.9

Affected Packages5 packages

🔴Vulnerability Details

2
GHSA
GHSA-3745-3c7x-hjqq: A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allo↗2024-10-02
▶
CVEList
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability↗2024-10-02
▶

📋Vendor Advisories

1
Cisco
Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation and Remote Command Execution Vulnerabilities↗2024-10-02
▶
CVE-2024-20470 (HIGH CVSS 7.2) | A vulnerability in the web-based ma | cvebase.io