In a recent security advisory, Cisco disclosed several vulnerabilities affecting the RV340, RV340W, RV345 , and RV345P Dual WAN Gigabit VPN.
See also: Cisco patches serious vulnerabilities in IOS software
Additionally, Cisco issued a security advisory regarding a critical vulnerability in the Nexus Dashboard Fabric Controller (NDFC).
Cisco Small Business Routers provide reliable, secure connectivity solutions designed specifically for small businesses. These routers offer powerful features, such as advanced security protocols, traffic management capabilities, and easy-to-use interfaces, making them ideal for supporting growing businesses. With options for both wired and wireless connectivity, Cisco routers ensure seamless integration into existing networks while maintaining high performance and stability. In addition, they offer scalability to accommodate future business growth, along with comprehensive support and resources, ensuring that small business networks remain efficient and secure.
These vulnerabilities could allow an authenticated, remote attacker to elevate privileges and execute arbitrary commands on the underlying operating system of affected devices.
See also: Vulnerability in Cisco IOS XR allows hackers to gain elevated privileges
Unfortunately, Cisco has announced that they will not be releasing software updates to address these issues, as the products have reached the end of their support.
The vulnerabilities affect the following Cisco RV Series Small Business Routers:
- RV340 Dual WAN Gigabit VPN Routers
- RV340W Dual WAN Gigabit Wireless-AC VPN Routers
- RV345 Dual WAN Gigabit VPN Routers
- RV345P Dual WAN Gigabit PoE VPN Routers
These routers are managed through a web, which is accessible over a local LAN connection or a WAN connection if remote management is enabled.
See also: Cisco's merchandise store targeted by cyberattack
Remote management is disabled by default. Users can verify if this feature is enabled by going to Basic Settings > Remote Management in the web interface.
Source: cybersecuritynews
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
