Information disclosure in Cisco Small_business_rv340
CVE-2017-6784
A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to access sensitive data. The attacker could use this information to conduct additional…
Vulnerability class: Information Disclosure
EPSS: 0.017 (74.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Cisco Small_business_rv340
- Cisco Small_business_rv340_firmware — versions 1.0.0.30, 1.0.0.33, 1.0.1.9
- Cisco Small_business_rv345
- Cisco Small_business_rv345_firmware — versions 1.0.0.30, 1.0.0.33, 1.0.1.9
- Cisco Small_business_rv345p
- Cisco Small_business_rv345p_firmware — versions 1.0.0.30, 1.0.0.33, 1.0.1.9
- Cisco Systems, Inc. Rv340, Rv345, And Rv345p Dual Wan Gigabit Vpn Routers — versions firmware 1.0.0.30, 1.0.0.33, 1.0.1.9, 1.0.1.16
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2017-6784?
- CVE-2017-6784 is a medium-severity vulnerability in Cisco Small_business_rv340, classified under Information Disclosure. CVSS score: 5.3/10. Published 2017-08-17.
- How severe is CVE-2017-6784?
- Medium severity. CVSS v3 base score is 5.3 out of 10.