Improper input validation in Cisco Small Business Rv Series Router Firmware
CVE-2020-3357
A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected de…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
EPSS: 0.042 (89.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Small Business Rv Series Router Firmware — versions n/a
- Cisco Rv340_dual_wan_gigabit_vpn_router
- Cisco Rv340_dual_wan_gigabit_vpn_router_firmware
- Cisco Rv340w_dual_wan_gigabit_wireless-ac_vpn_router
- Cisco Rv340w_dual_wan_gigabit_wireless-ac_vpn_router_firmware
- Cisco Rv345_dual_wan_gigabit_vpn_router
- Cisco Rv345_dual_wan_gigabit_vpn_router_firmware
- Cisco Rv345p_dual_wan_gigabit_poe_vpn_router
- Cisco Rv345p_dual_wan_gigabit_poe_vpn_router_firmware
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-3357?
- CVE-2020-3357 is a critical-severity vulnerability in Cisco Small Business Rv Series Router Firmware, classified under Improper Input Validation. CVSS score: 9.8/10. Published 2020-07-16.
- How severe is CVE-2020-3357?
- Critical severity. CVSS v3 base score is 9.8 out of 10.