Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco Small Business RV Series Routers Vulnerabilities
Vulnerability Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
Cisco Small Business 缓冲区错误漏洞
Vulnerability Description
Cisco Small Business是美国思科（Cisco）公司的一个交换机。 Cisco Small Business RV 系列路由器存在缓冲区错误漏洞，该漏洞源于会话标识符生成函数使用弱熵造成的。攻击者可以通过使用暴力破解来确定当前会话标识符，然后重用该标识符来接管正在进行的会话，或者通过制作新的有效会话标识符并绕过整个身份验证机制来利用此漏洞。成功的利用可能允许攻击者在 Web UI 中以最高管理用户级别的权限采取行动，并利用此通报中描述的其他漏洞发动进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A