Description

Cisco Small Business RV Series devices have a vulnerability in web-based management interface. An unauthenticated attacker can bypass authentication and upload files to directories that should require administrative authentication.

Remediation

Upgrade to the firmware version of Cisco

References

Cisco RV34X Series – Authentication Bypass and Remote Command Execution

Related Vulnerabilities

Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.5)

WordPress Plugin WPS Hide Login Security Bypass (1.5.4.2)

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)

WordPress Plugin Thrive Apprentice Security Bypass (2.3.9.3)

Oracle E-Business Suite iStore open user registration

Severity

Medium

Classification

CWE-119 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Tags

Authentication Bypass