Skip to content
OpenAdvisories
High WID-SEC-2024-3073 11 CVEs

Cisco Small Business: Mehrere Schwachstellen ermöglichen Privilegieneskalation

Published Oct 3, 2024 · Updated Oct 3, 2024 · de-DE

Summary

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Cisco Small Business ausnutzen, um seine Privilegien zu erhöhen, beliebige Befehle auszuführen und einen Denial of Service-Zustand zu verursachen.

Product

Die Cisco Small Business Produktfamilie beinhaltet Netzwerk-, Kommunikations-, WLAN- und Sicherheitsprodukte, sowie Router und Switche.

Vulnerabilities 11

  • High 8.8

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Privilege Escalation Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate privileges on an affected device. This vulnerability exists be…

  • Medium 6.8

    Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial…

  • Medium 6.8

    Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial…

  • Medium 6.8

    Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial…

  • Medium 6.8

    Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial…

  • Medium 6.5

    Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability

    A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this…

  • Medium 6.5

    Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,…

  • Medium 6.5

    Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,…

  • Medium 6.5

    Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,…

  • Medium 6.5

    Cisco Small Business RV042, RV042G, RV320, and RV325 Remote Command Execution Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to execute arbitrary code as the root user. To exploit this vulnerability,…

  • Medium 6.5

    Cisco Small Business RV042, RV042G, RV320, and RV325 Denial of Service Vulnerabilities

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial…

Revision history

  1. #1

    Initiale Fassung

References