CVE-2021-1473 CVE-2021-1473

漏洞描述

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

影响产品

思科系统公司CISCO-RV340查看产品 →思科系统公司CISCO-RV345查看产品 →思科系统公司CISCO-RV340W查看产品 →思科系统公司CISCO-RV345P查看产品 →思科系统公司rv340查看产品 →

修复建议

建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。

参考链接

packetstormsecurity.comhttp://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html↗seclists.orghttp://seclists.org/fulldisclosure/2021/Apr/39↗tools.cisco.comhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx↗

漏洞与影响对象	风险等级	CVSS	EPSS	利用情报	披露时间
CVE-2022-20707RCE CVE-2022-20707 CISCO-RV340 CISCO-RV345 CISCO-RV340W+2	高危	10.0	83.0%	PoCEXP	2022/02/10
CVE-2022-20705RCE CVE-2022-20705 CISCO-RV340 CISCO-RV345 CISCO-RV340W+3	严重	10.0	82.3%	PoCEXP	2022/02/10
CVE-2022-20699RCE CVE-2022-20699 CISCO-RV340 CISCO-RV345 CISCO-RV340W+3	严重	10.0	89.9%	PoCEXP	2022/02/10

利用情报状态

漏洞描述

影响产品

修复建议

参考链接

同产品关联漏洞