Cisco RV042/RV042G/RV320/RV325 up to 4.2.3.14 Web-based Management Interface heap-based overflow

Summaryinfo

A vulnerability was found in Cisco RV042, RV042G, RV320 and RV325. It has been declared as critical. This issue affects some unknown processing of the component Web-based Management Interface. The manipulation results in heap-based overflow. This vulnerability is identified as CVE-2024-20522. The attack can be executed remotely. There is not any exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability was found in Cisco RV042, RV042G, RV320 and RV325. It has been classified as critical. Affected is some unknown processing of the component Web-based Management Interface. The manipulation with an unknown input leads to a heap-based overflow vulnerability. CWE is classifying the issue as CWE-122. A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc(). This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers could allow an authenticated, Administrator-level, remote attacker to cause an unexpected reload of an affected device, resulting in a denial of service (DoS) condition. To exploit this vulnerability, an attacker would need to have valid Administrator credentials on the affected device.   This vulnerability is due to improper validation of user input that is in incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface of the affected device. A successful exploit could allow the attacker to cause an unexpected reload of the device, resulting in a DoS condition.

The advisory is shared for download at sec.cloudapps.cisco.com. This vulnerability is traded as CVE-2024-20522 since 11/08/2023. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation needs additional levels of successful authentication. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 10/05/2024).

Upgrading eliminates this vulnerability.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• RV042
• RV042G
• RV320
• RV325

Version

• 1.0.1.17
• 1.0.2.03
• 1.1.0.09
• 1.1.1.06
• 1.1.1.19
• 1.2.1.13
• 1.2.1.14
• 1.3.1.10
• 1.3.1.12
• 1.3.2.02
• 1.3.12.6-tm
• 1.3.12.19-tm
• 1.3.13.02-tm
• 1.4.2.15
• 1.4.2.17
• 1.4.2.19
• 1.4.2.20
• 1.4.2.22
• 1.5.1.05
• 1.5.1.11
• 1.5.1.13
• 3.0.0.1-tm
• 3.0.0.19-tm
• 3.0.2.01-tm
• 4.0.0.7
• 4.0.2.08-tm
• 4.0.3.03-tm
• 4.0.4.02-tm
• 4.1.0.02-tm
• 4.1.1.01
• 4.2.1.02
• 4.2.2.08
• 4.2.3.03
• 4.2.3.06
• 4.2.3.07
• 4.2.3.08
• 4.2.3.09
• 4.2.3.10
• 4.2.3.14

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion