CVE-2021-1610

Critical

Description

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details section of this advisory.

SeverityCritical
CVSS9.8
Exploit probability—
ProductCisco Small Business Rv Series Router Firmware
PublishedAug 4, 2021
First seenAug 4, 2021
Weakness typeCWE-121CWE-121

How to fix

Update
  • cisco small_business_rv_series_router_firmware1.0.03.22 or later

Affected products

ProductAffected versionsFixed in
cisco small_business_rv_series_router_firmwarev < 1.0.03.221.0.03.22

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2021-1610 · Cisco Small Business Rv Series Router Firmware · Dark Radar