HIGH✓ PATCH🇵🇱 Wersja polska

CVE-2024-20393

CVSS 8.8v3.1pub. 2024-10-02upd. 2024-10-08

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists because the web-based management interface discloses sensitive information. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow an attacker to elevate privileges from guest to admin.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

  • Cisco Rv340 Dual Wan Gigabit Vpn Router

    HW
    Cisco
    all versions

  • Cisco Rv340 Dual Wan Gigabit Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 more

  • Cisco Rv340w Dual Wan Gigabit Wireless Ac Vpn Router

    HW
    Cisco
    all versions

  • Cisco Rv340w Dual Wan Gigabit Wireless Ac Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 more

  • Cisco Rv345 Dual Wan Gigabit Vpn Router

    HW
    Cisco
    all versions

  • Cisco Rv345 Dual Wan Gigabit Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 more

  • Cisco Rv345p Dual Wan Gigabit Poe Vpn Router

    HW
    Cisco
    all versions

  • Cisco Rv345p Dual Wan Gigabit Poe Vpn Router Firmware

    OS
    Cisco
    1.0.00.291.0.00.331.0.01.161.0.01.171.0.01.181.0.01.201.0.02.161.0.03.151.0.03.161.0.03.171.0.03.181.0.03.191.0.03.201.0.03.211.0.03.22+ 5 more
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
Tags
VPN
CWE
References

Related vulnerabilities

CVE-2020-3357CRITICAL9.8PL ✓same product

RCE i DoS w funkcji SSL VPN routerów Cisco Small Business RV340/RV345

CVE-2024-20470HIGH7.2same product

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P...

CVE-2020-3358HIGH8.6same product

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could al...

CVE-2026-20182CRITICAL10.0⚠ KEVPL ✓same vendor

Cisco Catalyst SD-WAN — pominięcie uwierzytelnienia z dostępem administracyjnym

CVE-2026-20131CRITICAL10.0⚠ KEVPL ✓same vendor

RCE przez insecure deserialization w Cisco Secure Firewall Management Center