CVE-2023-20073 Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers Arbitrary File Upload Vulnerability

Medium 5.3 Published 5 Apr 2023 Updated 28 Oct 2024

Unauthenticated remote attackers can upload arbitrary files to Cisco RV Series routers, potentially leading to code execution or privilege escalation.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-20073?

CVE-2023-20073 is a medium-severity vulnerability in Cisco Small Business RV Series Router Firmware, published on 5 Apr 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remote attacker to upload arbitrary files to an affected device. This vulnerability is due to insufficient authorization enforcement mechanisms in the context of file uploads. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to upload arbitrary files to the affected device.

Weakness: CWE-434

Which versions are affected by CVE-2023-20073?

It affects 4 products.

Products include Cisco Rv340 Firmware, Cisco Rv340w Firmware, Cisco Rv345 Firmware, Cisco Rv345p Firmware.

How do I fix CVE-2023-20073?

No fix has been published for CVE-2023-20073 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-20073 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-20073 exists.

Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.

Sources

Also known as GHSA-w538-44mp-m2cm.