Buffer overflow in Cisco Small Business Rv Series Router Firmware
CVE-2021-1308
Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak sy…
Vulnerability class: Buffer Overflow
EPSS: 0.004 (35.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H.
Affected products
- Cisco Small Business Rv Series Router Firmware — versions n/a
- Cisco Rv132w
- Cisco Rv132w_firmware — versions 1.0.0.14, 1.0.1.14, 1.0.1.20
- Cisco Rv134w
- Cisco Rv134w_firmware — versions 1.0.0.14, 1.0.1.14, 1.0.1.20
- Cisco Rv160
- Cisco Rv160_firmware — versions 1.0.0.14, 1.0.1.14, 1.0.1.20
- Cisco Rv160w
- Cisco Rv160w_firmware — versions 1.0.0.14, 1.0.1.14, 1.0.1.20
- Cisco Rv260
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-1308?
- CVE-2021-1308 is a high-severity vulnerability in Cisco Small Business Rv Series Router Firmware, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 7.4/10. Published 2021-04-08.
- How severe is CVE-2021-1308?
- High severity. CVSS v3 base score is 7.4 out of 10.