CVE Feed

    Dashboard / CVE / CVE-2024-20523

    CVE-2024-20523

    A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.   This vulnerability is due to improper validation of user input that is in incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.

    Published:Oct 2, 2024
    Last Modified:Oct 8, 2024
    EPS:Oct 2, 2024
    EPSS Score:0.00067
    CVSS Score:6.8

    Affected Products

    Vendor
    Cisco
    Product
    Rv042
    Vendor
    Cisco
    Product
    Rv042 Firmware
    Vendor
    Cisco
    Product
    Rv042g
    Vendor
    Cisco
    Product
    Rv042g Firmware
    Vendor
    Cisco
    Product
    Rv320
    Vendor
    Cisco
    Product
    Rv320 Firmware
    Vendor
    Cisco
    Product
    Rv325
    Vendor
    Cisco
    Product
    Rv325 Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High