Main
Vulnerability Database
Exploits
ID:7311 - Exploit for Command Injection in Cisco Systems, Inc products - CVE-2021-1473
ID:7311 - Exploit for Command Injection in Cisco Systems, Inc products - CVE-2021-1473
Published: February 1, 2022
Vulnerability identifier: #VU51987
Vulnerability risk: High
CVE-ID: CVE-2021-1473
CWE-ID: CWE-77
Exploitation vector: Remote access
Vulnerable software:
Cisco RV340 Dual WAN Gigabit VPN Router
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router
Cisco RV345 Dual WAN Gigabit VPN Router
Cisco RV345P Dual WAN Gigabit VPN Router
Cisco RV340 Dual WAN Gigabit VPN Router
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router
Cisco RV345 Dual WAN Gigabit VPN Router
Cisco RV345P Dual WAN Gigabit VPN Router
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to execute arbitrary commands on the target system.
The vulnerability exists due to improper input validation in the web-based management interface. A remote attacker can pass specially crafted data to the application and execute arbitrary commands on the target system.
Remediation
Install updates from vendor's website.