CVE-2021-1331
Assigner: cisco
Published: 2021-02-03T00:00:00
State: PUBLISHED
affected: product: Cisco Small Business RV Series Router Firmware 
vendor: Cisco
versions: status: affected
version: n/a
datePublic: 2021-02-03T00:00:00
descriptions: value: Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device.
exploits: value: The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerabilities described in this advisory. 
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-121
description: CWE-121
type: CWE
source: advisory: cisco-sa-rv-overflow-ghZP68yj
defect: CSCvv97027
CSCvv97031
CSCvv97034
CSCvv97035
CSCvv97036
CSCvv97037
CSCvv97038
CSCvv97040
CSCvv97041
CSCvv97042
CSCvv97043
CSCvv97044
CSCvv97046
CSCvv97047
CSCvv97048
CSCvv97049
CSCvv97050
CSCvv97051
CSCvv97052
CSCvv97053
CSCvv97054
CSCvv97056
CSCvv97057
CSCvv97058
CSCvv97059
CSCvv97060
CSCvv97061
CSCvv97062
CSCvv97063
CSCvv97064
discovery: INTERNAL
title: Cisco Small Business RV Series Routers Management Interface Remote Command Execution and Denial of Service Vulnerabilities