Buffer overflow in Cisco Systems, Inc products - CVE-2021-1309
Published: April 8, 2021
Vulnerability identifier: #VU51992
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1309
CWE-ID: CWE-119
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error in the LLDP implementation. A remote attacker on the local network can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
RV132W ADSL2+ Wireless-N VPN Router
Cisco Small Business RV160 Series VPN Router
Cisco Small Business RV160W Wireless-AC VPN Router
Cisco Small Business RV260 VPN Router
Cisco Small Business RV260P VPN Router with POE
Cisco Small Business RV260W Wireless-AC VPN Router
RV134W VDSL2 Wireless-AC VPN Router
Cisco RV340 Dual WAN Gigabit VPN Router
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router
Cisco RV345 Dual WAN Gigabit VPN Router
Cisco RV345P Dual WAN Gigabit VPN Router
Cisco Small Business RV160 Series VPN Router
Cisco Small Business RV160W Wireless-AC VPN Router
Cisco Small Business RV260 VPN Router
Cisco Small Business RV260P VPN Router with POE
Cisco Small Business RV260W Wireless-AC VPN Router
RV134W VDSL2 Wireless-AC VPN Router
Cisco RV340 Dual WAN Gigabit VPN Router
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router
Cisco RV345 Dual WAN Gigabit VPN Router
Cisco RV345P Dual WAN Gigabit VPN Router
How to mitigate CVE-2021-1309
Install updates from vendor's website.
RV132W ADSL2+ Wireless-N VPN Router - update to 1.0.1.15
Cisco Small Business RV160 Series VPN Router - update to 1.0.01.03
Cisco Small Business RV160W Wireless-AC VPN Router - update to 1.0.01.03
Cisco Small Business RV260 VPN Router - update to 1.0.01.03
Cisco Small Business RV260P VPN Router with POE - update to 1.0.01.03
Cisco Small Business RV260W Wireless-AC VPN Router - update to 1.0.01.03
RV134W VDSL2 Wireless-AC VPN Router - update to 1.0.1.21
Cisco RV340 Dual WAN Gigabit VPN Router - update to 1.0.03.21
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router - update to 1.0.03.21
Cisco RV345 Dual WAN Gigabit VPN Router - update to 1.0.03.21
Cisco RV345P Dual WAN Gigabit VPN Router - update to 1.0.03.21
Cisco Small Business RV160 Series VPN Router - update to 1.0.01.03
Cisco Small Business RV160W Wireless-AC VPN Router - update to 1.0.01.03
Cisco Small Business RV260 VPN Router - update to 1.0.01.03
Cisco Small Business RV260P VPN Router with POE - update to 1.0.01.03
Cisco Small Business RV260W Wireless-AC VPN Router - update to 1.0.01.03
RV134W VDSL2 Wireless-AC VPN Router - update to 1.0.1.21
Cisco RV340 Dual WAN Gigabit VPN Router - update to 1.0.03.21
Cisco RV340W Dual WAN Gigabit Wireless-AC VPN Router - update to 1.0.03.21
Cisco RV345 Dual WAN Gigabit VPN Router - update to 1.0.03.21
Cisco RV345P Dual WAN Gigabit VPN Router - update to 1.0.03.21