Nyancat0131

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV340, RV340W, RV345, RV345P versions (affected versions not specified) Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (affected versions not specified) **Description** The issue exists due to insufficient input validation in the web interface of the Cisco Small Business routers' firmware. An attacker, acting remotely, can exploit this to disclose protected information or overwrite arbitrary files using a specially crafted HTTP request. The vulnerability could allow an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, or cause denial of service (DoS). **Recommendations** For Cisco Small Business RV340, RV340W, RV345, RV345P: At the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (affected versions not specified) **Description** The issue allows an attacker to execute arbitrary code, elevate privileges, execute arbitrary commands, bypass authentication and authorization protections, fetch and run unsigned software, and cause denial of service (DoS). This is due to the failure to neutralize special elements used in the operating system command. The vulnerability can be exploited to execute arbitrary commands. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** TP-Link AC1750 versions prior to 211210 **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the NetUSB.ko kernel module, resulting from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this issue to execute code in the context of root. **Recommendations** For TP-Link AC1750 versions prior to 211210, update to a version 211210 or later to resolve the issue. As a temporary workaround, consider disabling the NetUSB.ko kernel module until a patch is available. Restrict access to the router to minimize the risk of exploitation. Avoid using the router until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** NETGEAR R6700v3 version 1.0.4.120 10.0.91 NETGEAR D7800 (affected versions not specified) NETGEAR R6220 (affected versions not specified) NETGEAR R6230 (affected versions not specified) NETGEAR R6400v2 (affected versions not specified) NETGEAR R7000 (affected versions not specified) NETGEAR R7800 (affected versions not specified) **Description** This issue allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR routers. Authentication is not required to exploit this issue. The specific flaw exists within the NetUSB module, resulting from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this issue to execute code in the context of root. The exploitation can occur via port 20005. **Recommendations** For NETGEAR R6700v3 version 1.0.4.120 10.0.91, consider disabling the NetUSB module until a patch is available. For NETGEAR D7800, NETGEAR R6220, NETGEAR R6230, NETGEAR R6400v2, NETGEAR R7000, and NETGEAR R7800, at the moment, there is no information about a newer version that contains a fix for this issue.