Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Remote Code Execution Vulnerability

A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. In order to exploit this vulnerability, the attacker must have valid admin credentials. This vulnerability exists because the web-based management interface does not sufficiently validate user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system.

N/A

表达式/命令分隔符转义处理不恰当

Cisco Small Business 安全漏洞

Cisco Small Business是美国思科（Cisco）公司的一个交换机。 Cisco Small Business存在安全漏洞，该漏洞源于基于 Web 的管理界面没有充分验证用户提供的输入。允许经过身份验证的远程攻击者提升权限并在受影响设备的底层操作系统上执行任意命令。

N/A

N/A