CVE-2023-20073

Scores

EPSS

0.913high91.3%
0%20%40%60%80%100%

Percentile: 91.3%

CVSS

9.8critical3.x
0246810

CVSS Score: 9.8/10

All CVSS Scores

CVSS 3.x
9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-434

Related Vulnerabilities

Exploits

Exploit ID: CVE-2023-20073

Source: github-poc

URL: https://github.com/RegularITCat/CVE-2023-20073

Vulnerable Software (4)

Type: Configuration

Vendor: *

Product: rv340_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.0.03.29",          "vulnerable": tru...

Source: nvd

Type: Configuration

Vendor: *

Product: rv340w_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.0.03.29",          "vulnerable": tr...

Source: nvd

Type: Configuration

Vendor: *

Product: rv345_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.0.03.29",          "vulnerable": tru...

Source: nvd

Type: Configuration

Vendor: *

Product: rv345p_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.0.03.29",          "vulnerable": tr...

Source: nvd

End of list