ID

VAR-202006-1127


CVE

CVE-2020-3291


TITLE

plural Cisco Small Business RV Buffer error vulnerability in series routers

Trust: 0.8

sources: JVNDB: JVNDB-2020-006855

DESCRIPTION

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV320 and RV325 Series Routers and Cisco Small Business RV016, RV042, and RV082 Routers could allow an authenticated, remote attacker with administrative privileges to execute arbitrary code on an affected device. The vulnerabilities are due to insufficient boundary restrictions on user-supplied input to scripts in the web-based management interface. An attacker with administrative privileges that are sufficient to log in to the web-based management interface could exploit each vulnerability by sending crafted requests that contain overly large values to an affected device, causing a stack overflow. A successful exploit could allow the attacker to cause the device to crash or allow the attacker to execute arbitrary code with root privileges on the underlying operating system. plural Cisco Small Business RV A buffer error vulnerability exists in series routers.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be put into a state. Cisco Small Business RV016 Multi-WAN VPN is a VPN router from Cisco in the United States. The vulnerability stems from the program's failure to properly limit the user's input boundary

Trust: 2.16

sources: NVD: CVE-2020-3291 // JVNDB: JVNDB-2020-006855 // CNVD: CNVD-2020-34327

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2020-34327

AFFECTED PRODUCTS

vendor:ciscomodel:rv320scope:lteversion:1.5.1.05

Trust: 1.0

vendor:ciscomodel:rv042gscope:lteversion:4.2.3.10

Trust: 1.0

vendor:ciscomodel:rv042scope:lteversion:4.2.3.10

Trust: 1.0

vendor:ciscomodel:rv082scope:lteversion:4.2.3.10

Trust: 1.0

vendor:ciscomodel:rv016scope:lteversion:4.2.3.10

Trust: 1.0

vendor:ciscomodel:rv325scope:lteversion:1.5.1.05

Trust: 1.0

vendor:ciscomodel:rv320 dual gigabit wan vpn routerscope: - version: -

Trust: 0.8

vendor:ciscomodel:rv325 dual gigabit wan vpn routerscope: - version: -

Trust: 0.8

vendor:ciscomodel:rv016 multi-wan vpnscope: - version: -

Trust: 0.8

vendor:ciscomodel:rv042 dual wan vpnscope: - version: -

Trust: 0.8

vendor:ciscomodel:rv042g dual gigabit wan vpnscope: - version: -

Trust: 0.8

vendor:ciscomodel:rv082 dual wan vpnscope: - version: -

Trust: 0.8

vendor:ciscomodel:small business rv016 multi-wan vpnscope:lteversion:<=4.2.3.10

Trust: 0.6

vendor:ciscomodel:rv042 dual wan vpnscope:lteversion:<=4.2.3.10

Trust: 0.6

vendor:ciscomodel:rv042g dual gigabit wan vpnscope:lteversion:<=4.2.3.10

Trust: 0.6

vendor:ciscomodel:rv082 dual wan vpnscope:lteversion:<=4.2.3.10

Trust: 0.6

vendor:ciscomodel:rv320 dual gigabit wan vpnscope:lteversion:<=1.5.1.05

Trust: 0.6

vendor:ciscomodel:rv325 dual gigabit wan vpnscope:lteversion:<=1.5.1.05

Trust: 0.6

sources: CNVD: CNVD-2020-34327 // JVNDB: JVNDB-2020-006855 // NVD: CVE-2020-3291

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2020-3291
value: HIGH

Trust: 1.0

ykramarz@cisco.com: CVE-2020-3291
value: HIGH

Trust: 1.0

NVD: JVNDB-2020-006855
value: HIGH

Trust: 0.8

CNVD: CNVD-2020-34327
value: HIGH

Trust: 0.6

CNNVD: CNNVD-202006-1161
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2020-3291
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

NVD: JVNDB-2020-006855
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: NONE
impactScore: NONE
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.8

CNVD: CNVD-2020-34327
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.6

nvd@nist.gov: CVE-2020-3291
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.2
impactScore: 5.9
version: 3.1

Trust: 1.0

ykramarz@cisco.com: CVE-2020-3291
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.2
impactScore: 5.9
version: 3.0

Trust: 1.0

NVD: JVNDB-2020-006855
baseSeverity: HIGH
baseScore: 7.2
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: CNVD: CNVD-2020-34327 // JVNDB: JVNDB-2020-006855 // CNNVD: CNNVD-202006-1161 // NVD: CVE-2020-3291 // NVD: CVE-2020-3291

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.8

problemtype:CWE-787

Trust: 1.0

sources: JVNDB: JVNDB-2020-006855 // NVD: CVE-2020-3291

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202006-1161

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-202006-1161

CONFIGURATIONS

sources: JVNDB: JVNDB-2020-006855

PATCH

title:cisco-sa-rv-routers-stack-vUxHmnNzurl:https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-routers-stack-vUxHmnNz

Trust: 0.8

title:Patch for Multiple Buffer Overflow Vulnerabilities in Cisco Products (CNVD-2020-34327)url:https://www.cnvd.org.cn/patchInfo/show/222917

Trust: 0.6

title:Multiple Cisco Product Buffer Error Vulnerability Fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=121854

Trust: 0.6

sources: CNVD: CNVD-2020-34327 // JVNDB: JVNDB-2020-006855 // CNNVD: CNNVD-202006-1161

EXTERNAL IDS

db:NVDid:CVE-2020-3291

Trust: 3.0

db:JVNDBid:JVNDB-2020-006855

Trust: 0.8

db:CNVDid:CNVD-2020-34327

Trust: 0.6

db:AUSCERTid:ESB-2020.2119

Trust: 0.6

db:AUSCERTid:ESB-2020.2119.2

Trust: 0.6

db:CNNVDid:CNNVD-202006-1161

Trust: 0.6

sources: CNVD: CNVD-2020-34327 // JVNDB: JVNDB-2020-006855 // CNNVD: CNNVD-202006-1161 // NVD: CVE-2020-3291

REFERENCES

url:https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-rv-routers-stack-vuxhmnnz

Trust: 2.2

url:https://nvd.nist.gov/vuln/detail/cve-2020-3291

Trust: 2.0

url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2020-3291

Trust: 0.8

url:https://www.auscert.org.au/bulletins/esb-2020.2119/

Trust: 0.6

url:https://www.auscert.org.au/bulletins/esb-2020.2119.2/

Trust: 0.6

sources: CNVD: CNVD-2020-34327 // JVNDB: JVNDB-2020-006855 // CNNVD: CNNVD-202006-1161 // NVD: CVE-2020-3291

SOURCES

db:CNVDid:CNVD-2020-34327
db:JVNDBid:JVNDB-2020-006855
db:CNNVDid:CNNVD-202006-1161
db:NVDid:CVE-2020-3291

LAST UPDATE DATE

2024-08-14T13:24:27.635000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2020-34327date:2020-06-23T00:00:00
db:JVNDBid:JVNDB-2020-006855date:2020-07-20T00:00:00
db:CNNVDid:CNNVD-202006-1161date:2021-08-09T00:00:00
db:NVDid:CVE-2020-3291date:2021-08-06T18:44:12.943

SOURCES RELEASE DATE

db:CNVDid:CNVD-2020-34327date:2020-06-23T00:00:00
db:JVNDBid:JVNDB-2020-006855date:2020-07-20T00:00:00
db:CNNVDid:CNNVD-202006-1161date:2020-06-17T00:00:00
db:NVDid:CVE-2020-3291date:2020-06-18T03:15:13.167