Multiple vulnerabilities in Cisco Small Business RV160, 260, and 340 Series VPN Routers
| Risk | High |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | N/A |
| CWE-ID | CWE-912 CWE-798 |
| Exploitation vector | Network |
| Public exploit | N/A |
| Vulnerable software Subscribe |
Cisco RV340 Dual WAN Gigabit VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Small Business RV 260 Series VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc Cisco Small Business RV160 Series VPN Router Hardware solutions / Routers & switches, VoIP, GSM, etc |
| Vendor | Cisco Systems, Inc |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Hidden functionality
EUVDB-ID: #VU20874
Risk: Medium
CVSSv3.1: 5.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C]
CVE-ID: N/A
CWE-ID:
CWE-912 - Hidden Functionality (Backdoor)
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to compromise vulnerable system
The vulnerability exists due to hidden functionality (backdoor) is present in software. A remote authenticated attacker with access to the base operating system can use this functionality to view undocumented user accounts on an affected device. These accounts include debug-admin and root accounts.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.00.33 - 1.0.02.16
Cisco Small Business RV 260 Series VPN Router: 1.0.00.13 - 1.0.00.15
Cisco Small Business RV160 Series VPN Router: 1.0.00.13 - 1.0.00.15
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-sb-vpnrouter
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Use of hard-coded credentials
EUVDB-ID: #VU20875
Risk: High
CVSSv3.1: 7.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]
CVE-ID: N/A
CWE-ID:
CWE-798 - Use of Hard-coded Credentials
Exploit availability: No
DescriptionThe vulnerability allows a remote attacker to gain full access to vulnerable system.
The vulnerability exists due to presence of hard-coded credentials in application code. A remote authenticated attacker with access to the base operating system can access the affected system and elevate privileges to these users: root, debug-admin, cisco, admin, and guest.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
MitigationInstall updates from vendor's website.
Vulnerable software versionsCisco RV340 Dual WAN Gigabit VPN Router: 1.0.00.33 - 1.0.02.16
Cisco Small Business RV 260 Series VPN Router: 1.0.00.13 - 1.0.00.15
Cisco Small Business RV160 Series VPN Router: 1.0.00.13 - 1.0.00.15
External linkshttp://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190904-sb-vpnrouter
Q & A
Can this vulnerability be exploited remotely?
Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.
How the attacker can exploit this vulnerability?
The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
