CVE-2024-20521

Summary

CVE-2024-20521 is a vulnerability affecting the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers. This issue allows authenticated, Administrator-level attackers to execute arbitrary code as the root user, exploiting it requires valid Administrator credentials. The root cause is improper input validation in the web-based management interface, enabling attackers to send crafted HTTP requests that could lead to code execution on the underlying operating system. If exploited, an attacker could gain complete control over the affected device.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.