Cisco RV340 Dual WAN Gigabit VPN Router Firmware vulnerabilities

5 CVEs affecting Cisco RV340 Dual WAN Gigabit VPN Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20470, published 2024-10-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-3357, published 2020-07-16. Critical severity, CVSS 9.8. EPSS: 4.2% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL) VPN feature of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to…
CVE-2020-3358, published 2020-07-16. High severity, CVSS 8.6. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart,…
CVE-2024-20416, published 2024-07-17. Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days. A vulnerability in the upload module of Cisco RV340 and RV345 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This…
CVE-2024-20470, published 2024-10-02. High severity, CVSS 7.2. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute…
CVE-2024-20393, published 2024-10-02. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to elevate…