CVE-2021-1472 — Vulnetix

CVE-2021-1472 PUBLISHED CVSS 5.300000190734863 MEDIUM

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

EPSS 91.29% · 99.7th percentile

Risk Scores

CVSS 3.1

5.300000190734863

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

91.29%

99.7th percentile

Affected Products

Vendor	Product	Versions
cisco	rv260_firmware	0
cisco	rv345_firmware	0
cisco	rv345p_firmware	0
Cisco	Cisco Small Business RV Series Router Firmware	n/a
cisco	rv340_firmware	0
cisco	rv160w_firmware	0
cisco	rv260p_firmware	0
cisco	rv260w_firmware	0
cisco	rv160_firmware	0
cisco	rv340w_firmware	0

Exploit Intelligence

http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html (nist-nvd)
CIRCL confirmed: CVE-2021-1472 (circl-sighting)
CIRCL seen: CVE-2021-1472 (circl-sighting)
CIRCL seen: CVE-2021-1472 (circl-sighting)
CIRCL seen: CVE-2021-1472 (circl-sighting)
20210407 Cisco Small Business RV Series Routers Vulnerabilities (circl)
20210419 [CVE-2021-1472/CVE-2021-1473] Cisco RV Series Authentication Bypass and Remote Command Execution (circl)
web_poc_map_v2.yaml (github-poc)
web_poc_map_v2.yaml (github-poc)
Cisco RV Authentication Bypass / Code Execution Vulnerability (0day-today)

…and 14 more exploits

Timeline

Apr 7, 2021 CVE Published
Apr 14, 2021 EPSS Score
Apr 20, 2021 PoC Published
Aug 24, 2021 EPSS Score
Dec 27, 2021 EPSS Score
Feb 1, 2022 PoC Published
Feb 1, 2022 PoC Published
Feb 2, 2022 EPSS Score
Feb 4, 2022 EPSS Score
Apr 1, 2022 EPSS Score
Jul 3, 2022 EPSS Score
Nov 6, 2022 EPSS Score

References

Open in Interactive Console →