Security News > 2021 > August > Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug

Got a cheap Cisco router in your home office? If it's one of these, there's an exposed RCE hole you need to plug
2021-08-05 13:28

Cisco has published patches for critical vulns affecting the web management interface for some of its Small Business Dual WAN Gigabit routers - including a 9.8-rated nasty.

The two vulnerabilities affect the RV340, RV345, RV340W, and RV345P products, which are aimed at SMEs and home office setups.

Attackers abusing them on unpatched devices are able to execute arbitrary code and also force reboots of affected routers, causing a denial-of-service condition.

The vulns are broadly similar to ones discovered back in February, affecting Cisco's RV160 line of small biz VPN routers.

Small router security is an increasing problem as inexpensive, old but functional devices come under increased scrutiny.

In other alarming Switchzilla router security news, the US-HQ'd company is offering 5G connectivity baked into ruggedised routers intended for use in cars and off-road vehicles.


News URL

https://go.theregister.com/feed/www.theregister.com/2021/08/05/cisco_rv340_series_router_vulns_patched/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Cisco 4471 240 3152 1887 612 5891
AN 2 0 5 3 0 8