VDB
CVE-2021-1414
CVE-2021-1414
PUBLISHED
CVSS 6.300000190734863 MEDIUM
Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device.
EPSS 1.86% · 77.4th percentile
Risk Scores
CVSS 3.1
6.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS Score
1.86%
77.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | rv340_firmware | 0 |
| cisco | rv345p_firmware | 0 |
| Cisco | Cisco Small Business RV Series Router Firmware | n/a |
| cisco | rv340w_firmware | 0 |
| cisco | rv345_firmware | 0 |
Timeline
- Apr 7, 2021 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Dec 28, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 2, 2022 EPSS Score
- Jul 4, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Jan 9, 2023 EPSS Score