Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rjmm-h25r-cqxf

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL connection to the targeted device. A successful exploit could allow the attacker to cause a reload, resulting in a DoS condition.

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL connection to the targeted device. A successful exploit could allow the attacker to cause a reload, resulting in a DoS condition.

EPSS

Процентиль: 42%
0.00201
Низкий

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 8.6
nvd
больше 5 лет назад

A vulnerability in the Secure Sockets Layer (SSL) VPN feature for Cisco Small Business RV VPN Routers could allow an unauthenticated, remote attacker to cause the device to unexpectedly restart, causing a denial of service (DoS) condition. The vulnerability is due to a lack of proper input validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request over an SSL connection to the targeted device. A successful exploit could allow the attacker to cause a reload, resulting in a DoS condition.

CVSS3: 8.6
fstec
больше 5 лет назад

Уязвимость реализации функции VPN Secure Sockets Layer (SSL) микропрограммного обеспечения маршрутизаторов Cisco Small Business RV340, Cisco Small Business RV340W, Cisco Small Business RV345 и Cisco Small Business RV345P, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 42%
0.00201
Низкий

Дефекты

CWE-20