CVE-2020-3293

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV320 versions not specified Cisco Small Business RV325 versions not specified Cisco Small Business RV016 versions not specified Cisco Small Business RV042 versions not specified Cisco Small Business RV082 versions not specified

Description The issue is caused by insufficient boundary restrictions on user-supplied input to scripts in the web-based management interface, leading to a stack overflow. An attacker with administrative privileges could exploit this by sending crafted requests with overly large values to an affected device, potentially causing the device to crash or allowing the execution of arbitrary code with root privileges on the underlying operating system.

Recommendations For Cisco Small Business RV320, update to a version that fixes the vulnerability. For Cisco Small Business RV325, update to a version that fixes the vulnerability. For Cisco Small Business RV016, update to a version that fixes the vulnerability. For Cisco Small Business RV042, update to a version that fixes the vulnerability. For Cisco Small Business RV082, update to a version that fixes the vulnerability. As a temporary workaround, consider restricting access to the web-based management interface to minimize the risk of exploitation.