CVE-2021-1343
Last modified
CVE-2021-1343 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. EPSS estimates a 2.19% chance of exploitation in the next 30 days.
Description
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device.
Metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Rv016 Multi-Wan Vpn Router Firmware | <= 4.2.3.14 |
| Cisco | Rv042 Dual Wan Vpn Router Firmware | <= 4.2.3.14 |
| Cisco | Rv042g Dual Gigabit Wan Vpn Router Firmware | <= 4.2.3.14 |
| Cisco | Rv082 Dual Wan Vpn Router Firmware | <= 4.2.3.14 |
| Cisco | Rv320 Dual Gigabit Wan Vpn Router Firmware | <= 1.5.1.11 |
| Cisco | Rv325 Dual Gigabit Wan Vpn Router Firmware | <= 1.5.1.11 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-1343?
How severe is CVE-2021-1343?
How do I fix CVE-2021-1343?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-1337Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1338Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1339Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1340Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1341Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1342Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1344Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1345Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1346Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1347Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1348Multiple vulnerabilities in the web-based management interfa…7.2
- CVE-2021-1349A vulnerability in the web-based management interface of Cis…6.5
Are you affected by CVE-2021-1343?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
