Cisco Small Business Rv Series Router Firmware vulnerabilities

CVE-2024-20381 [HIGH] CWE-285 CVE-2024-20381: A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) a A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the configuration of an affected application or device. This

CVE-2021-1602 [CRITICAL] CWE-78 CVE-2021-1602: A vulnerability in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, A vulnerability in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient user input validation. An attacker could exp

CVE-2021-1609 [CRITICAL] CWE-121 CVE-2021-1609: Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Det

CVE-2021-1610 [HIGH] CWE-121 CVE-2021-1610: Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details

CVE-2017-6620 [MEDIUM] CWE-264 CVE-2017-6620: A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wire A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management ACL. The vulnerability is due to incorrect implementation of the ACL decision made during the ingress connection request to the remote management interface