Vulnerability in Cisco Small Business Rv Series Router Firmware
CVE-2024-20470
A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In o…
EPSS: 0.006 (45.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Small Business Rv Series Router Firmware — versions 1.0.01.17, 1.0.03.17, 1.0.01.16
- Cisco Rv340_dual_wan_gigabit_vpn_router
- Cisco Rv340_dual_wan_gigabit_vpn_router_firmware — versions 1.0.00.29, 1.0.00.33, 1.0.01.16
- Cisco Rv340w_dual_wan_gigabit_wireless-ac_vpn_router
- Cisco Rv340w_dual_wan_gigabit_wireless-ac_vpn_router_firmware — versions 1.0.00.29, 1.0.00.33, 1.0.01.16
- Cisco Rv345_dual_wan_gigabit_vpn_router
- Cisco Rv345_dual_wan_gigabit_vpn_router_firmware — versions 1.0.00.29, 1.0.00.33, 1.0.01.16
- Cisco Rv345p_dual_wan_gigabit_poe_vpn_router
- Cisco Rv345p_dual_wan_gigabit_poe_vpn_router_firmware — versions 1.0.00.29, 1.0.00.33, 1.0.01.16
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2024-20470?
- CVE-2024-20470 is a high-severity vulnerability in Cisco Small Business Rv Series Router Firmware, classified under CWE-146. CVSS score: 7.2/10. Published 2024-10-02.
- How severe is CVE-2024-20470?
- High severity. CVSS v3 base score is 7.2 out of 10.
- Is CVE-2024-20470 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.