6.8

CVE-2024-20523

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.
 
This vulnerability is due to improper validation of user input that is in incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
CiscoRv042 Firmware Version1.0.1.17
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.0.2.03
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.0.09
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.1.06
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.1.1.19
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.2.1.13
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.2.1.14
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.1.10
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.1.12
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.2.02
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.12.6-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.12.19-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.3.13.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.15
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.17
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.19
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.20
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.4.2.22
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.05
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.11
   CiscoRv042 Version-
CiscoRv042 Firmware Version1.5.1.13
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.0.1-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.0.19-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version3.0.2.01-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.0.7
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.2.08-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.3.03-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.0.4.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.1.0.02-tm
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.1.1.01
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.1.02
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.2.08
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.03
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.06
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.07
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.08
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.09
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.10
   CiscoRv042 Version-
CiscoRv042 Firmware Version4.2.3.14
   CiscoRv042 Version-
CiscoRv042g Firmware Version1.0.1.17
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.0.2.03
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.0.09
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.1.06
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.1.1.19
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.2.1.13
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.2.1.14
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.1.10
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.1.12
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.2.02
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.12.6-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.12.19-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.3.13.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.15
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.17
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.19
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.20
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.4.2.22
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.05
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.11
   CiscoRv042g Version-
CiscoRv042g Firmware Version1.5.1.13
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.0.1-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.0.19-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version3.0.2.01-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.0.7
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.2.08-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.3.03-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.0.4.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.1.0.02-tm
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.1.1.01
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.1.02
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.2.08
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.03
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.06
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.07
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.08
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.09
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.10
   CiscoRv042g Version-
CiscoRv042g Firmware Version4.2.3.14
   CiscoRv042g Version-
CiscoRv320 Firmware Version1.0.1.17
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.0.2.03
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.0.09
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.1.06
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.1.1.19
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.2.1.13
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.2.1.14
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.1.10
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.1.12
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.2.02
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.12.6-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.12.19-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.3.13.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.15
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.17
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.19
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.20
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.4.2.22
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.05
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.11
   CiscoRv320 Version-
CiscoRv320 Firmware Version1.5.1.13
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.0.1-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.0.19-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version3.0.2.01-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.0.7
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.2.08-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.3.03-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.0.4.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.1.0.02-tm
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.1.1.01
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.1.02
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.2.08
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.03
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.06
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.07
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.08
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.09
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.10
   CiscoRv320 Version-
CiscoRv320 Firmware Version4.2.3.14
   CiscoRv320 Version-
CiscoRv325 Firmware Version1.0.1.17
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.0.2.03
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.0.09
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.1.06
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.1.1.19
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.2.1.13
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.2.1.14
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.1.10
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.1.12
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.2.02
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.12.6-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.12.19-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.3.13.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.15
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.17
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.19
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.20
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.4.2.22
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.05
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.11
   CiscoRv325 Version-
CiscoRv325 Firmware Version1.5.1.13
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.0.1-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.0.19-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version3.0.2.01-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.0.7
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.2.08-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.3.03-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.0.4.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.1.0.02-tm
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.1.1.01
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.1.02
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.2.08
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.03
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.06
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.07
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.08
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.09
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.10
   CiscoRv325 Version-
CiscoRv325 Firmware Version4.2.3.14
   CiscoRv325 Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.07% 0.21
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
psirt@cisco.com 6.8 2.3 4
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H
CWE-121 Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.