ID
VAR-202108-0848
CVE
CVE-2021-34730
TITLE
plural Cisco Small Business Router Input verification vulnerability in
Trust: 0.8
DESCRIPTION
A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability. plural Cisco Small Business Router There is an input validation vulnerability in.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state. Cisco Small Business is a switch of Cisco (Cisco)
Trust: 1.8
AFFECTED PRODUCTS
| vendor: | cisco | model: | rv130 vpn router | scope: | eq | version: | - | Trust: 1.0 |
| vendor: | cisco | model: | rv215w wireless-n vpn router | scope: | eq | version: | - | Trust: 1.0 |
| vendor: | cisco | model: | application extension platform | scope: | eq | version: | 1.0.3.55 | Trust: 1.0 |
| vendor: | cisco | model: | rv130w wireless-n multifunction vpn router | scope: | eq | version: | - | Trust: 1.0 |
| vendor: | cisco | model: | rv110w wireless-n vpn firewall | scope: | eq | version: | - | Trust: 1.0 |
| vendor: | シスコシステムズ | model: | rv110w wireless-n vpn firewall | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | cisco rv130w wireless-n multifunction vpn router | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | rv215w wireless-n vpn router | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | rv130 vpn router | scope: | - | version: | - | Trust: 0.8 |
| vendor: | シスコシステムズ | model: | application extension platform | scope: | - | version: | - | Trust: 0.8 |
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
|
|
PROBLEMTYPE DATA
| problemtype: | CWE-787 | Trust: 1.1 |
| problemtype: | CWE-121 | Trust: 1.0 |
| problemtype: | Inappropriate input confirmation (CWE-20) [NVD evaluation ] | Trust: 0.8 |
THREAT TYPE
remote
Trust: 0.6
TYPE
buffer error
Trust: 0.6
PATCH
| title: | cisco-sa-cisco-sb-rv-overflow-htpymMB5 | url: | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-sb-rv-overflow-htpymMB5 | Trust: 0.8 |
| title: | Cisco Small Business Enter the fix for the verification error vulnerability | url: | http://123.124.177.30/web/xxk/bdxqById.tag?id=160198 | Trust: 0.6 |
| title: | Cisco: Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerability | url: | https://vulmon.com/vendoradvisory?qidtp=cisco_security_advisories_and_alerts_ciscoproducts&qid=cisco-sa-cisco-sb-rv-overflow-htpymMB5 | Trust: 0.1 |
| title: | - | url: | https://github.com/Live-Hack-CVE/CVE-2021-34730 | Trust: 0.1 |
| title: | alonzzzo | url: | https://github.com/Alonzozzz/alonzzzo | Trust: 0.1 |
| title: | PoC | url: | https://github.com/Jonathan-Elias/PoC | Trust: 0.1 |
| title: | - | url: | https://github.com/khulnasoft-lab/awesome-security | Trust: 0.1 |
| title: | Threatpost | url: | https://threatpost.com/critical-cisco-bug-routers-unpatched/168831/ | Trust: 0.1 |
| title: | BleepingComputer | url: | https://www.bleepingcomputer.com/news/security/cisco-won-t-fix-zero-day-rce-vulnerability-in-end-of-life-vpn-routers/ | Trust: 0.1 |
EXTERNAL IDS
| db: | NVD | id: | CVE-2021-34730 | Trust: 3.4 |
| db: | JVNDB | id: | JVNDB-2021-010406 | Trust: 0.8 |
| db: | CNNVD | id: | CNNVD-202108-1644 | Trust: 0.7 |
| db: | AUSCERT | id: | ESB-2021.2808 | Trust: 0.6 |
| db: | VULHUB | id: | VHN-394972 | Trust: 0.1 |
| db: | VULMON | id: | CVE-2021-34730 | Trust: 0.1 |
REFERENCES
| url: | https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-cisco-sb-rv-overflow-htpymmb5 | Trust: 2.5 |
| url: | https://nvd.nist.gov/vuln/detail/cve-2021-34730 | Trust: 0.8 |
| url: | https://www.auscert.org.au/bulletins/esb-2021.2808 | Trust: 0.6 |
| url: | https://cwe.mitre.org/data/definitions/787.html | Trust: 0.1 |
| url: | https://github.com/live-hack-cve/cve-2021-34730 | Trust: 0.1 |
| url: | https://nvd.nist.gov | Trust: 0.1 |
| url: | https://threatpost.com/critical-cisco-bug-routers-unpatched/168831/ | Trust: 0.1 |
SOURCES
| db: | VULHUB | id: | VHN-394972 |
| db: | VULMON | id: | CVE-2021-34730 |
| db: | JVNDB | id: | JVNDB-2021-010406 |
| db: | CNNVD | id: | CNNVD-202108-1644 |
| db: | NVD | id: | CVE-2021-34730 |
LAST UPDATE DATE
2024-08-14T14:50:12.489000+00:00
SOURCES UPDATE DATE
| db: | VULHUB | id: | VHN-394972 | date: | 2022-10-27T00:00:00 |
| db: | VULMON | id: | CVE-2021-34730 | date: | 2022-10-27T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-010406 | date: | 2022-06-30T08:57:00 |
| db: | CNNVD | id: | CNNVD-202108-1644 | date: | 2022-10-28T00:00:00 |
| db: | NVD | id: | CVE-2021-34730 | date: | 2023-11-07T03:36:14.030 |
SOURCES RELEASE DATE
| db: | VULHUB | id: | VHN-394972 | date: | 2021-08-18T00:00:00 |
| db: | VULMON | id: | CVE-2021-34730 | date: | 2021-08-18T00:00:00 |
| db: | JVNDB | id: | JVNDB-2021-010406 | date: | 2022-06-30T00:00:00 |
| db: | CNNVD | id: | CNNVD-202108-1644 | date: | 2021-08-18T00:00:00 |
| db: | NVD | id: | CVE-2021-34730 | date: | 2021-08-18T20:15:07.447 |