Cisco RV34x/RV160/RV260 Routers Privilege Escalation and RCE Vulnerability

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Affected Products: - Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. 2. Vulnerability Types: - Privilege Escalation Vulnerability: Privilege escalation vulnerability. - Remote Command Execution Vulnerability: Remote command execution vulnerability. 3. Vulnerability Description: - These vulnerabilities exist in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers. - Attackers can exploit these vulnerabilities by sending crafted HTTP input to the affected devices. - Successful exploitation allows attackers to escalate privileges from guest to admin level. 4. Vulnerability Impact: - The severity rating for these vulnerabilities is High. - CVSS Base Score is 8.8. 5. Workarounds: - No workarounds are available. 6. Affected Product List: - RV340 Dual WAN Gigabit VPN Routers - RV340W Dual WAN Gigabit Wireless-AC VPN Routers - RV345 Dual WAN Gigabit VPN Routers - RV345P Dual WAN Gigabit PoE VPN Routers 7. Additional Affected Product List: - RV160 VPN Routers - RV160W Wireless-AC VPN Routers - RV260 VPN Routers - RV260P VPN Routers with PoE - RV260W Wireless-AC VPN Routers 8. Source: - The vulnerability was reported by H4lo from Webin DBappSecurity. 9. URL: - URL for detailed vulnerability information: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv34x-privesc-rce-qE33TCms This information helps users understand the affected products, nature of the vulnerabilities, impact severity, and how to report them.

Goal Reached Thanks to every supporter — we hit 100%!

Cisco RV34x/RV160/RV260 Routers Privilege Escalation and RCE Vulnerability