HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-20393

CVSS 8.8v3.1pub. 2024-10-02upd. 2024-10-08

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interface discloses sensitive information. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow an attacker to elevate privileges from guest to admin.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Cisco Rv340 Dual Wan Gigabit Vpn Router

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv340 Dual Wan Gigabit Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 więcej

  • Cisco Rv340w Dual Wan Gigabit Wireless Ac Vpn Router

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv340w Dual Wan Gigabit Wireless Ac Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 więcej

  • Cisco Rv345 Dual Wan Gigabit Vpn Router

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv345 Dual Wan Gigabit Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 więcej

  • Cisco Rv345p Dual Wan Gigabit Poe Vpn Router

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv345p Dual Wan Gigabit Poe Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 więcej
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
VPN
CWE
References

Related vulnerabilities

CVE-2020-3357CRITICAL9.8ten sam produkt

A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, an...

CVE-2024-20470HIGH7.2ten sam produkt

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P...

CVE-2020-3358HIGH8.6ten sam produkt

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could al...

CVE-2026-20182CRITICAL10.0⚠ KEVPL ✓ten sam vendor

Cisco Catalyst SD-WAN — pominięcie uwierzytelnienia z dostępem administracyjnym

CVE-2026-20131CRITICAL10.0⚠ KEVPL ✓ten sam vendor

RCE przez insecure deserialization w Cisco Secure Firewall Management Center