What’s Vulnerable › Vulnerabilities

CVE-2021-1609: Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Web Management Vulnerabilities

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 9.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-08-04 · updated 2026-06-17
• Weakness: CWE-121

Description

Multiple vulnerabilities in the web-based management interface of the Cisco Small Business RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an attacker to do the following: Execute arbitrary code Cause a denial of service (DoS) condition Execute arbitrary commands For more information about these vulnerabilities, see the Details section of this advisory.

Affected products

• Cisco Small Business RV Series Router Firmware: before 1.0.03.22 — fixed in 1.0.03.22

How to fix

Upgrade to a fixed version: Cisco Small Business RV Series Router Firmware 1.0.03.22. Check the vendor advisory for mitigations.

References

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv340-cmdinj-rcedos-pY8J3qfy

Get alerted when CVE-2021-1609 or the next vulnerability affects your stack