Cisco Small Business RV Series Routers Vulnerabilities

Vulnerability

The vulnerability resides in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. It is due to insufficient validation of user-supplied input, allowing an attacker to send crafted HTTP requests to trigger arbitrary code execution or a device reload. All firmware versions prior to the fixed release are affected [1].

Exploitation

An unauthenticated, remote attacker can exploit this vulnerability by sending specially crafted HTTP input to the affected device's web-based management interface. No authentication or user interaction is required. The attacker only needs network access to the management interface [1].

Impact

Successful exploitation allows the attacker to execute arbitrary code as the root user on the underlying operating system, leading to full compromise of confidentiality, integrity, and availability. Alternatively, the attacker can cause the device to reload, resulting in a denial of service (DoS) condition [1].

Mitigation

Cisco has released software updates that address this vulnerability. Users should upgrade to the latest firmware version for their device. There are no workarounds that mitigate this vulnerability [1].