Saturday, July 13, 2024
EHA

Multiple Flaws in Cisco Small Business Routers Allow Remote Attackers to Execute Arbitrary Code

Cisco has released software updates that address multiple vulnerabilities in Cisco Small Business VPN routers which allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device.

Vulnerable Products

The vulnerabilities tracked as CVE-2022-20827 and CVE-2022-20841 affect the following Cisco products:

  • RV160 VPN Routers
  • RV160W Wireless-AC VPN Routers
  • RV260 VPN Routers
  • RV260P VPN Routers with PoE
  • RV260W Wireless-AC VPN Routers
  • RV340 Dual WAN Gigabit VPN Routers
  • RV340W Dual WAN Gigabit Wireless-AC VPN Routers
  • RV345 Dual WAN Gigabit VPN Routers
  • RV345P Dual WAN Gigabit POE VPN Routers

The vulnerability tracked as CVE-2022-20842 affects the following Cisco products:

  • RV340 Dual WAN Gigabit VPN Routers
  • RV340W Dual WAN Gigabit Wireless-AC VPN Routers
  • RV345 Dual WAN Gigabit VPN Routers
  • RV345P Dual WAN Gigabit POE VPN Routers

In an advisory, Cisco noted that “The vulnerabilities are dependent on one another. Exploitation of one of the vulnerabilities may be required to exploit another vulnerability”.

“In addition, a software release that is affected by one of the vulnerabilities may not be affected by the other vulnerabilities”.

Cisco Small Business RV Series Routers Remote Code Execution and Denial of Service Vulnerability:

The flaw is tracked as (CVE-2022-20842) with the CVSS Base Score: 9.8, found in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers.

Upon successful exploitation of the vulnerability could allow an attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. An attacker could exploit this vulnerability by sending crafted HTTP input to an affected device.

The advisory mention that “The vulnerability is due to insufficient validation of user-supplied input to the web-based management interface”.

Cisco Small Business RV Series Routers Web Filter Database Update Command Injection Vulnerability:

This vulnerability is tracked as (CVE-2022-20827) with the CVSS Base Score: 9.0 found in the web filter database update feature of Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers.

This could allow an unauthenticated, remote attacker to perform a command injection and execute commands on the underlying operating system with root privileges. It is due to insufficient input validation.

“An attacker could exploit this vulnerability by submitting crafted input to the web filter database update feature”, the advisory stated.

Cisco Small Business RV Series Routers Open Plug and Play Command Injection Vulnerability:

This flaw is tracked as (CVE-2022-20841) with the CVSS Base Score: 8.3 found in the Open Plug and Play (PnP) module of Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers.

The flaw could allow an attacker to inject and execute arbitrary commands on the underlying operating system. It is due to insufficient validation of user-supplied input. Upon successful exploitation, this could allow the attacker to execute arbitrary commands on the underlying Linux operating system.

Cisco says “An attacker must leverage a man-in-the-middle position or have an established foothold on a specific network device that is connected to the affected router”.

Cisco Released Patches to Address the Vulnerabilities

CVE-2022-20827 and CVE-2022-20841

Cisco ProductAffected ReleasesFirst Fixed Release
RV160 and RV260 Series RoutersEarlier than 1.0.01.05Not vulnerable
RV160 and RV260 Series Routers1.0.01.051.0.01.09
RV340 and RV345 Series RoutersEarlier than 1.0.03.26Not vulnerable
RV340 and RV345 Series Routers1.0.03.261.0.03.28

CVE-2022-20842

Cisco ProductAffected ReleasesFirst Fixed Release
RV340 and RV345 Series Routers1.0.03.26 and earlier1.0.03.28

Cisco has released patches for three vulnerabilities which are rated ‘Critical’ and ‘High’ in severity. Cisco recommends upgrading to an appropriate fixed software release and there are no workarounds that address these vulnerabilities.

You can follow us on LinkedinTwitterFacebook for daily Cybersecurity updates.

Website

Latest articles

mSpy Data Breach: Millions of Customers’ Data Exposed

mSpy, a widely used phone spyware application, has suffered a significant data breach, exposing...

Advance Auto Parts Cyber Attack: Over 2 Million Users Data Exposed

RALEIGH, NC—Advance Stores Company, Incorporated, a prominent commercial entity in the automotive industry, has...

Hackers Using ClickFix Social Engineering Tactics to Deploy Malware

Cybersecurity researchers at McAfee Labs have uncovered a sophisticated new method of malware delivery,...

Coyote Banking Trojan Attacking Windows Users To Steal Login Details

Hackers use Banking Trojans to steal sensitive financial information. These Trojans can also intercept...

Hackers Created 700+ Fake Domains to Sell Olympic Games Tickets

As the world eagerly anticipates the Olympic Games Paris 2024, a cybersecurity threat has...

Japanese Space Agency Spotted zero-day via Microsoft 365 Services

The Japan Aerospace Exploration Agency (JAXA) has revealed details of a cybersecurity incident that...

Top 10 Active Directory Management Tools – 2024

Active Directory Management Tools are essential for IT administrators to manage and secure Active...
Guru baran
Guru baranhttps://gbhackers.com
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Free Webinar

Low Rate DDoS Attack

9 of 10 sites on the AppTrana network have faced a DDoS attack in the last 30 days.
Some DDoS attacks could readily be blocked by rate-limiting, IP reputation checks and other basic mitigation methods.
More than 50% of the DDoS attacks are employing botnets to send slow DDoS attacks where millions of IPs are being employed to send one or two requests per minute..
Key takeaways include:

  • The mechanics of a low-DDoS attack
  • Fundamentals of behavioural AI and rate-limiting
  • Surgical mitigation actions to minimize false positives
  • Role of managed services in DDoS monitoring

Related Articles