{"id":"CVE-2021-34730","published":"2021-08-18T19:40:27Z","modified":"2024-11-07T22:03:55Z","title":"Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service…","vendor":"Cisco","product":"Cisco Small Business RV Series Router Firmware","tier":"core","eol":null,"description":{"text":"A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability.","provenance":"source","from":"CVE.org"},"summary":{"text":"A flaw in the Universal Plug-and-Play (UPnP) service of the Cisco Small Business RV Series Router Firmware, affecting the RV110W, RV130, RV130W, and RV215W routers, stems from improper validation of incoming UPnP traffic. An unauthenticated remote attacker who sends a crafted UPnP request to an affected device, with no user interaction required, can execute arbitrary code as root or cause the device to reload, resulting in a denial of service.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:53:52Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.185,"percentile":0.97239,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2022-06-22","exploitedFirstSeen":"2022-06-22","ransomware":true,"evidence":[{"url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf","date":"2022-06-22"}],"evidenceTotal":1,"provenance":"source"},"exploited":true,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-121","name":"Stack-based Buffer Overflow"}],"references":[{"url":"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-sb-rv-overflow-htpymMB5","tags":["vendor-advisory","x_refsource_CISCO"]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2021-21380","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-21380","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2021-09-30","earliestUrl":"https://github.com/badmonkey7/CVE-2021-34730","repos":[{"name":"badmonkey7/CVE-2021-34730","url":"https://github.com/badmonkey7/CVE-2021-34730","stars":28,"created":"2021-09-30"}]},"first":{"date":"2021-09-30","source":"PoC-in-GitHub","url":"https://github.com/badmonkey7/CVE-2021-34730"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2021-08-18","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2021-34730","provenance":"source"},{"date":"2021-09-30","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/badmonkey7/CVE-2021-34730","provenance":"source"},{"date":"2022-06-22","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://static.tenable.com/marketing/whitepapers/Whitepaper-Ransomware_Ecosystem.pdf","provenance":"source"}],"speed":{"daysToPublicExploit":43,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":76.3,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1590 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.45,"detail":"percentile 0.9724"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}