HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2021-1251

CVSS 7.4v3.1pub. 2021-04-08upd. 2024-11-21

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Rv132w

    HW
    Cisco
    all versions

  • Cisco Rv132w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv134w

    HW
    Cisco
    all versions

  • Cisco Rv134w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv160

    HW
    Cisco
    all versions

  • Cisco Rv160 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv160w

    HW
    Cisco
    all versions

  • Cisco Rv160w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260

    HW
    Cisco
    all versions

  • Cisco Rv260 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260p

    HW
    Cisco
    all versions

  • Cisco Rv260p Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260w

    HW
    Cisco
    all versions

  • Cisco Rv260w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv340

    HW
    Cisco
    all versions

  • Cisco Rv340 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv340w

    HW
    Cisco
    all versions

  • Cisco Rv340w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv345

    HW
    Cisco
    all versions

  • Cisco Rv345 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv345p

    HW
    Cisco
    all versions

  • Cisco Rv345p Firmware

    OS
    Cisco
    1.0.1.141.0.3.20
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
RCEDoS
CWE
References

Related vulnerabilities

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓same product

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2022-20701CRITICAL10.0⚠ KEVPL ✓same product

Krytyczne podatności RCE i Auth Bypass w routerach Cisco Small Business RV340/RV345

CVE-2022-20700CRITICAL10.0⚠ KEVPL ✓same product

Krytyczne podatności w routerach Cisco Small Business RV340/RV345 — RCE i Auth Bypass

CVE-2022-20699CRITICAL10.0⚠ KEVPL ✓same product

Krytyczna podatność RCE w routerach Cisco Small Business RV340/RV345

CVE-2022-20703CRITICAL10.0⚠ KEVPL ✓same product

Krytyczne podatności RCE i Auth Bypass w routerach Cisco Small Business RV340/RV345