CVE-2021-1473 Public exploit Medium · 5.3 EPSS 64.4%

Cisco Small Business RV Series Routers Vulnerabilities

Cisco · Cisco Small Business RV Series Router Firmware

Official description · CVE.org

Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Breakdown

65.8 / 100

Exploited: Yes, in VulnCheck KEV
Reports: 0
Tactics: 0/15

First seen exploited 6 months after disclosure. Public exploit code (Metasploit) was available 1 day before disclosure.

Public exploit codeMetasploit7 Apr 20211 day before
Disclosed8 Apr 2021day 0
First seen exploitedVulnCheck KEV evidence7 Oct 2021+6 mo

techniques

No techniques linked

No ATT&CK techniques are linked to this CVE yet. MITRE CTID has not mapped it, and no report passage in the corpus ties it to a technique.

What security researchers reported

Not named in any threat report yet

Also mentioned in 9 community threat pulses (AlienVault OTX)

Weaker evidence

Pulses are indicator collections that anyone can publish. A mention is not confirmation of exploitation.

References

3 links, grouped by NVD tag

Exploitation evidence

Not in KEV. CISA has not confirmed exploitation.

ENISA

Not marked exploited. EUVD-2021-6940

Public exploitAdvisories link exploit code.

, 30 Oct 2026

64.4%Top 0.77%

Chance of exploitation in the next 30 days. of scored CVEs (riskier than 99.23%).

3.1

5.3Medium · 5.3

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Priority factorsFormula

In a KEV cataloglisted in VulnCheck KEV 35.0/35

Recent KEV listingadded 1850 days ago 0.0/10

Known ransomware usenot known 0.0/10

EPSS percentilepercentile 0.9923 19.9/20

Threat reports0 reports 0.0/10

Public exploit code1 NVD exploit link; 1 Metasploit module 5.0/5

Mentioned in OTX pulses9 pulses 2.3/3

CVSS base scorebase score 5.3 3.7/7

End-of-life productsupported or unknown 0.0

Total65.8

Record

Published: 8 Apr 2021
Modified: 8 Nov 2024
: CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Elsewhere: NVD CVE.org JSON

Exploitation timelineExploitation timelineDated milestones for a CVE: when it was disclosed, when exploit code became public, when exploitation was confirmed, and when threat reports named it.

ATT&CKMITRE ATT&CKA public catalogue of the techniques attackers use, maintained by MITRE. Patchfirst uses it to describe what attackers do with a vulnerability. techniques

What security researchers reported

Also mentioned in 9 community threat pulses (AlienVault OTX)

References

vendor-advisory 1

mailing-list 1

x_refsource_MISC 1

techniques