Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

Bugtraq ID:	100402
Class:	Design Error
CVE:	CVE-2017-6784
Remote:	Yes
Local:	No
Published:	Aug 16 2017 12:00AM
Updated:	Aug 16 2017 12:00AM
Credit:	Cisco
Vulnerable:	Cisco RV345P 1.0.1.16 Cisco RV345P 1.0.0.33 Cisco RV345 1.0.1.16 Cisco RV345 1.0.0.33 Cisco RV340 1.0.1.16 Cisco RV340 1.0.0.33
Not Vulnerable:	Cisco RV345P 1.0.1.17 Cisco RV345 1.0.1.17 Cisco RV340 1.0.1.17

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN routers are prone to an information-disclosure vulnerability.

An attacker can exploit this issue to obtain sensitive information. This may lead to other attacks.

This issue is being tracked by the Cisco Bug ID CSCve37988.

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers Information Disclosure Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco RV340 Dual WAN Gigabit VPN Router Homepage (Cisco)
  
• Cisco RV345 Dual WAN Gigabit VPN Router Homepage (Cisco)
  
• Cisco RV345P Dual WAN Gigabit POE VPN Router Homepage (Cisco)
  
• cisco-sa-20170816-crr: Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Route (Cisco)