CVE-2020-3453— Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities
Quick assessment
Affected
Cisco Cisco Small Business RV Series Router Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Small Business RV340是美国思科（Cisco）公司的一个路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。 Cisco?Small Business RV340系列路由器基于Web的管理界面中存在输入验证错误漏洞，该漏洞允许具有身份验证的远程攻击者以受限用户的身份在基础操作系统上执行任意命令。
Possible ATT&CK Techniques 2 AI
T1068 · Exploitation for Privilege Escalation T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2020-3453
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vulnerabilities
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 Series Routers could allow an authenticated, remote attacker with administrative credentials to execute arbitrary commands on the underlying operating system (OS) as a restricted user. For more information about these vulnerabilities, see the Details section of this advisory.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
内存缓冲区边界内操作的限制不恰当
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Small Business RV340 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Small Business RV340是美国思科（Cisco）公司的一个路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。 Cisco?Small Business RV340系列路由器基于Web的管理界面中存在输入验证错误漏洞，该漏洞允许具有身份验证的远程攻击者以受限用户的身份在基础操作系统上执行任意命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Cisco Small Business RV Series Router Firmware | n/a | - |
|
II. Public POCs for CVE-2020-3453
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-3453
请登录查看更多情报信息。
Vendor Advisories for CVE-2020-3453 (2)
-
https://www.zerodayinitiative.com/advisories/ZDI-20-1101/ x_refsource_MISC
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-osinj-rce-pwTkPCJv vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2020-09-04 · 15 CVEs total
| CVE-2020-3495 | 9.9 CRITICAL | Cisco Jabber for Windows Message Handling Arbitrary Code Execution Vulnerability |
| CVE-2020-3430 | 8.8 HIGH | Cisco Jabber for Windows Protocol Handler Command Injection Vulnerability |
| CVE-2020-3530 | 8.4 HIGH | Cisco IOS XR Authenticated User Privilege Escalation Vulnerability |
| CVE-2020-3478 | 8.1 HIGH | Cisco Enterprise NFV Infrastructure Software File Overwrite Vulnerability |
| CVE-2020-3498 | 6.5 MEDIUM | Cisco Jabber for Windows Information Disclosure Vulnerability |
| CVE-2020-3545 | 6.0 MEDIUM | Cisco FXOS Software Buffer Overflow Vulnerability |
| CVE-2020-3537 | 5.7 MEDIUM | Cisco Jabber for Windows Universal Naming Convention Link Handling Vulnerability |
| CVE-2020-3542 | 5.3 MEDIUM | Cisco Webex Training Unauthorized Meeting Join Vulnerability |
| CVE-2020-3451 | 4.7 MEDIUM | Cisco Small Business RV340 Series Routers Command Injection and Remote Code Execution Vuln |
| CVE-2020-3541 | 4.4 MEDIUM | Cisco Webex Meetings Client for Windows, Webex Meetings Desktop App, and Webex Teams Infor |
| CVE-2020-3547 | 4.3 MEDIUM | Cisco Email Security Appliance, Cisco Content Security Management Appliance, and Cisco Web |
| CVE-2020-3365 | 4.3 MEDIUM | Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability |
| CVE-2020-3473 | Cisco IOS XR Software Authenticated User Privilege Escalation Vulnerability | |
| CVE-2020-3546 | Cisco Email Security Appliance Information Disclosure Vulnerability |
IV. Related Vulnerabilities
Same product: Cisco Small Business RV Series Router Firmware
-
CVE-2020-3431
Cisco Small Business RV Series Routers Cross-Site Scripting -
CVE-2024-20524
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20523
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20522
Cisco Small Business RV042, RV042G, RV320, and RV325 Denial -
CVE-2024-20521
Cisco Small Business RV042, RV042G, RV320, and RV325 Remote
Same vendor: Cisco
-
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability -
CVE-2026-76447
Cisco Identity Services Engine Certificate Reload Vulnerabil
Same weakness: CWE-119
-
CVE-2026-20352
Cisco Identity Services Engine RADIUS Denial of Service Vuln -
CVE-2026-92178
pdfforge PDF Architect PDF File Parsing Memory Corruption Re -
CVE-2026-19886
OriginLab Origin Viewer OGM File Parsing Memory Corruption R -
CVE-2026-91091
GPAC Node Insertion base_scenegraph.c gf_node_list_insert_ch -
CVE-2026-90831
GNU Binutils ELF String Table elf-strtab.c _bfd_elf_strtab_d
V. Comments for CVE-2020-3453
No comments yet