CVE-2021-1415

Name of the Vulnerable Software and Affected Versions: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers (affected versions not specified)

Description: The issue is related to multiple vulnerabilities in the web-based management interface of the affected devices. These vulnerabilities exist because HTTP requests are not properly validated, allowing an authenticated, remote attacker to execute arbitrary code with elevated privileges. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device. The vulnerabilities are also related to deficiencies in the deserialization mechanism.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.