Cisco Small Business RV Series Router Firmware vulnerabilities

5 CVEs affecting Cisco Small Business RV Series Router Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-20381, published 2024-09-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-1609, published 2021-08-04. Critical severity, CVSS 9.8. EPSS: 9.7% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following:…
CVE-2021-1610, published 2021-08-04. High severity, CVSS 8.8. EPSS: 9.1% chance of exploitation in the next 30 days. Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following:…
CVE-2021-1602, published 2021-08-04. Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days. A vulnerability in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary…
CVE-2017-6620, published 2017-05-03. Medium severity, CVSS 5.8. EPSS: 1.6% chance of exploitation in the next 30 days. A vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W Wireless-N VPN Router could allow an unauthenticated, remote attacker to bypass the remote management…
CVE-2024-20381, published 2024-09-11. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and…