HIGH✓ PATCH🇬🇧 English

CVE-2021-1251

CVSS 7.4v3.1pub. 2021-04-08upd. 2024-11-21

Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent).

oryginał EN
CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

  • Cisco Rv132w

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv132w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv134w

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv134w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv160

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv160 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv160w

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv160w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv260 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260p

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv260p Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv260w

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv260w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv340

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv340 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv340w

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv340w Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv345

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv345 Firmware

    OS
    Cisco
    1.0.1.141.0.3.20

  • Cisco Rv345p

    HW
    Cisco
    wszystkie wersje

  • Cisco Rv345p Firmware

    OS
    Cisco
    1.0.1.141.0.3.20
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
RCEDoS
CWE
Referencje

Powiązane podatności

CVE-2025-32433CRITICAL10.0⚠ KEVPL ✓ten sam produkt

Erlang/OTP SSH — nieuwierzytelniony RCE (CVSS 10.0)

CVE-2022-20701CRITICAL10.0⚠ KEVten sam produkt

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an ...

CVE-2022-20700CRITICAL10.0⚠ KEVten sam produkt

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an ...

CVE-2022-20699CRITICAL10.0⚠ KEVten sam produkt

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an ...

CVE-2022-20703CRITICAL10.0⚠ KEVten sam produkt

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an ...