8.8
Élevée
CVE-2024-20393 A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual…
Description
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interface discloses sensitive information. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow an attacker to elevate privileges from guest to admin.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Cisco Small Business RV Series Router Firmware 1.0 | 1.0.00.29 → 1.0.03.29 | Pas de correctif indiqué |
| small_business_rv_series_router_firmware 1.0 | 1.0.00.29 → 1.0.03.29 | Pas de correctif indiqué |
Références
- cisco-sa-rv34x-privesc-rce-qE33TCms sec.cloudapps.cisco.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Cisco Small Business RV Series Router Firmware
Les 262 CVE de Cisco Small Business RV Series Router Firmware →
CVE-2020-3431
A vulnerability in the web-based management interface of Cisco Small Business RV042 Dual WAN VPN Routers and…
6.1
Moyenne
CVE-2024-20524
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.8
Moyenne
CVE-2024-20523
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.8
Moyenne
CVE-2024-20522
A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers…
6.5
Moyenne