What is CVE-2021-1520?

CVE-2021-1520 is a medium-severity vulnerability in Cisco Small Business Rv Series Router Firmware, classified under Write-what-where Condition. CVSS score: 6.7/10. Published 2021-05-06.

How severe is CVE-2021-1520?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Cisco Small Business Rv Series Router Firmware

CVE-2021-1520

A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operati…

EPSS: 0.000 (8.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Small Business Rv Series Router Firmware — versions n/a

Weakness classification (CWE)

CWE-123 — Write-what-where Condition

References

20210505 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Local Privilege Escalation Vulnerability (vendor-advisory, x_refsource_CISCO)

Frequently asked questions

What is CVE-2021-1520?: CVE-2021-1520 is a medium-severity vulnerability in Cisco Small Business Rv Series Router Firmware, classified under Write-what-where Condition. CVSS score: 6.7/10. Published 2021-05-06.
How severe is CVE-2021-1520?: Medium severity. CVSS v3 base score is 6.7 out of 10.