CVE-2021-1472: Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and uploa...

Summary

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details sectio...

What to do

Update cisco rv160_firmware to version 1.0.01.03 or later.
Update cisco rv160w_firmware to version 1.0.01.03 or later.
Update cisco rv260_firmware to version 1.0.01.03 or later.
Update cisco rv260p_firmware to version 1.0.01.03 or later.
Update cisco rv260w_firmware to version 1.0.01.03 or later.
Update cisco rv340_firmware to version 1.0.03.21 or later.
Update cisco rv340w_firmware to version 1.0.03.21 or later.
Update cisco rv345_firmware to version 1.0.03.21 or later.
Update cisco rv345p_firmware to version 1.0.03.21 or later.

Affected software

Vendor	Product	Affected versions
cisco	rv160_firmware	< 1.0.01.03 `cpe:2.3:o:cisco:rv160_firmware::::::::`
cisco	rv160w_firmware	< 1.0.01.03 `cpe:2.3:o:cisco:rv160w_firmware::::::::`
cisco	rv260_firmware	< 1.0.01.03 `cpe:2.3:o:cisco:rv260_firmware::::::::`
cisco	rv260p_firmware	< 1.0.01.03 `cpe:2.3:o:cisco:rv260p_firmware::::::::`
cisco	rv260w_firmware	< 1.0.01.03 `cpe:2.3:o:cisco:rv260w_firmware::::::::`
cisco	rv340_firmware	< 1.0.03.21 `cpe:2.3:o:cisco:rv340_firmware::::::::`
cisco	rv340w_firmware	< 1.0.03.21 `cpe:2.3:o:cisco:rv340w_firmware::::::::`
cisco	rv345_firmware	< 1.0.03.21 `cpe:2.3:o:cisco:rv345_firmware::::::::`
cisco	rv345p_firmware	< 1.0.03.21 `cpe:2.3:o:cisco:rv345p_firmware::::::::`

Original advisory text

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and uploa...

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

References

http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-... Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2021/Apr/39 Mailing List Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-s... Vendor Advisory