Product:

Rv345_dual_wan_gigabit_vpn_router_firmware

(Cisco)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 4
Date Id Summary Products Score Patch Annotated
2020-07-16 CVE-2020-3357 A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device or cause the device to reload, resulting in a denial of service (DoS) condition. The vulnerability exists because HTTP requests are not properly validated. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL... Rv340_dual_wan_gigabit_vpn_router_firmware, Rv340w_dual_wan_gigabit_wireless\-Ac_vpn_router_firmware, Rv345_dual_wan_gigabit_vpn_router_firmware, Rv345p_dual_wan_gigabit_poe_vpn_router_firmware 9.8
2020-07-16 CVE-2020-3358 A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL connection to the targeted device. A successful exploit could allow the attacker to... Rv340_dual_wan_gigabit_vpn_router_firmware, Rv340w_dual_wan_gigabit_wireless\-Ac_vpn_router_firmware, Rv345_dual_wan_gigabit_vpn_router_firmware, Rv345p_dual_wan_gigabit_poe_vpn_router_firmware 8.6
2024-10-02 CVE-2024-20470 A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have valid admin credentials. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by... Rv340_dual_wan_gigabit_vpn_router_firmware, Rv340w_dual_wan_gigabit_wireless\-Ac_vpn_router_firmware, Rv345_dual_wan_gigabit_vpn_router_firmware, Rv345p_dual_wan_gigabit_poe_vpn_router_firmware 7.2
2024-10-02 CVE-2024-20393 A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interface discloses sensitive information. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow an attacker to elevate... Rv340_dual_wan_gigabit_vpn_router_firmware, Rv340w_dual_wan_gigabit_wireless\-Ac_vpn_router_firmware, Rv345_dual_wan_gigabit_vpn_router_firmware, Rv345p_dual_wan_gigabit_poe_vpn_router_firmware 8.8