CVE-2021-1308

High

Description

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

SeverityHigh
CVSS7.4
Exploit probability—
ProductCisco Rv132w Firmware
PublishedApr 8, 2021
First seenApr 8, 2021

How to fix

Affected products

ProductAffected versionsFixed in
cisco rv132w_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv134w_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv160_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv160w_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv260_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv260p_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv260w_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv340_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv340w_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv345_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—
cisco rv345p_firmware1.0.0.14, 1.0.1.14, 1.0.1.20—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.