CVE-2021-1413

Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device.

• CWE-502

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6bVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-558/Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6bVendor Advisory
• https://www.zerodayinitiative.com/advisories/ZDI-21-558/Third Party Advisory, VDB Entry

Published

Apr 8, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-1407Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1408Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1409Multiple vulnerabilities in the web-based management interfa…6.1
• CVE-2021-1410A vulnerability in the distribution list feature of Cisco&nb…4.3
• CVE-2021-1411Multiple vulnerabilities in Cisco Jabber for Windows, Cisco …9.9
• CVE-2021-1412Multiple vulnerabilities in the Admin portal of Cisco Identi…6.5
• CVE-2021-1414Multiple vulnerabilities in the web-based management interfa…6.3
• CVE-2021-1415Multiple vulnerabilities in the web-based management interfa…6.3
• CVE-2021-1416Multiple vulnerabilities in the Admin portal of Cisco Identi…4.3
• CVE-2021-1417Multiple vulnerabilities in Cisco Jabber for Windows, Cisco …6.5
• CVE-2021-1418Multiple vulnerabilities in Cisco Jabber for Windows, Cisco …6.5
• CVE-2021-1419A vulnerability in the SSH management feature of multiple Ci…7.8