6.8

CVE-2024-20516

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.
 
This vulnerability is due to improper validation of user input that is in incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.

Data is provided by the National Vulnerability Database (NVD)
CiscoRv042 Firmware Version1.0.1.17
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.0.2.03
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.0.09
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.1.06
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.1.19
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.2.1.13
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.2.1.14
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.1.10
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.1.12
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.2.02
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.12.6-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.12.19-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.13.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.15
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.17
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.19
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.20
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.22
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.05
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.11
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.13
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.0.1-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.0.19-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.2.01-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.0.7
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.2.08-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.3.03-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.4.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.1.0.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.1.1.01
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.1.02
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.2.08
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.03
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.06
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.07
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.08
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.09
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.10
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.14
   CiscoRv042 Version-
CiscoRv042g Firmware Version1.0.1.17
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.0.2.03
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.0.09
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.1.06
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.1.19
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.2.1.13
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.2.1.14
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.1.10
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.1.12
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.2.02
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.12.6-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.12.19-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.13.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.15
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.17
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.19
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.20
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.22
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.05
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.11
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.13
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.0.1-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.0.19-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.2.01-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.0.7
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.2.08-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.3.03-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.4.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.1.0.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.1.1.01
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.1.02
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.2.08
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.03
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.06
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.07
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.08
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.09
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.10
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.14
   CiscoRv042g Version-
CiscoRv320 Firmware Version1.0.1.17
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.0.2.03
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.0.09
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.1.06
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.1.19
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.2.1.13
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.2.1.14
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.1.10
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.1.12
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.2.02
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.12.6-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.12.19-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.13.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.15
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.17
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.19
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.20
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.22
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.05
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.11
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.13
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.0.1-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.0.19-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.2.01-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.0.7
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.2.08-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.3.03-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.4.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.1.0.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.1.1.01
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.1.02
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.2.08
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.03
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.06
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.07
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.08
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.09
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.10
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.14
   CiscoRv320 Version-
CiscoRv325 Firmware Version1.0.1.17
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.0.2.03
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.0.09
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.1.06
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.1.19
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.2.1.13
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.2.1.14
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.1.10
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.1.12
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.2.02
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.12.6-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.12.19-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.13.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.15
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.17
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.19
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.20
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.22
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.05
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.11
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.13
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.0.1-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.0.19-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.2.01-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.0.7
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.2.08-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.3.03-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.4.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.1.0.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.1.1.01
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.1.02
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.2.08
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.03
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.06
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.07
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.08
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.09
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.10
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.14
   CiscoRv325 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.06% 0.194
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
psirt@cisco.com 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CWE-122 Heap-based Buffer Overflow

A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.