Cisco RV134W Firmware vulnerabilities

6 CVEs affecting Cisco RV134W Firmware, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-1309, published 2021-04-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-0125: Cisco VPN Routers Remote Code Execution Vulnerability, published 2018-02-08. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-25. EPSS: 55.2% chance of exploitation in the next 30 days. A vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code and…
CVE-2018-0127, published 2018-02-08. Critical severity, CVSS 9.8. EPSS: 77.5% chance of exploitation in the next 30 days. A vulnerability in the web interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an unauthenticated, remote attacker to view configuration…
CVE-2021-1287, published 2021-03-18. High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to…
CVE-2021-1309, published 2021-04-08. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary…
CVE-2021-1308, published 2021-04-08. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary…
CVE-2021-1251, published 2021-04-08. High severity, CVSS 7.4. EPSS: 0.4% chance of exploitation in the next 30 days. Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary…