Vulnerability Details CVE-2020-3451
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.01
EPSS Ranking 75.9%
CVSS Severity
CVSS v3 Score 4.7
CVSS v2 Score 6.5
References
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
- https://www.zerodayinitiative.com/advisories/ZDI-20-1100/
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv
- https://www.zerodayinitiative.com/advisories/ZDI-20-1100/
Products affected by CVE-2020-3451
-
cpe:2.3:h:cisco:rv340:-
-
cpe:2.3:h:cisco:rv340w:-
-
cpe:2.3:h:cisco:rv345:-
-
cpe:2.3:h:cisco:rv345p:-
-
cpe:2.3:o:cisco:rv340_firmware:-
-
cpe:2.3:o:cisco:rv340_firmware:1.0.0.14
-
cpe:2.3:o:cisco:rv340_firmware:1.0.1.14
-
cpe:2.3:o:cisco:rv340_firmware:1.0.1.20
-
cpe:2.3:o:cisco:rv340w_firmware:-
-
cpe:2.3:o:cisco:rv340w_firmware:1.0.0.14
-
cpe:2.3:o:cisco:rv340w_firmware:1.0.1.14
-
cpe:2.3:o:cisco:rv340w_firmware:1.0.1.20
-
cpe:2.3:o:cisco:rv345_firmware:-
-
cpe:2.3:o:cisco:rv345_firmware:1.0.0.14
-
cpe:2.3:o:cisco:rv345_firmware:1.0.1.14
-
cpe:2.3:o:cisco:rv345_firmware:1.0.1.20
-
cpe:2.3:o:cisco:rv345p_firmware:-
-
cpe:2.3:o:cisco:rv345p_firmware:1.0.0.14
-
cpe:2.3:o:cisco:rv345p_firmware:1.0.1.14
-
cpe:2.3:o:cisco:rv345p_firmware:1.0.1.20