CVE-2024-20524

Summary

CVE-2024-20524 is a recently disclosed vulnerability affecting the web-based management interface of Cisco Small Business RV042, RV042G, RV320, and RV325 Routers. This issue allows an authenticated, Administrator-level, remote attacker to induce an unexpected reload of an affected device, leading to a denial of service (DoS) condition. The vulnerability arises from the router's failure to adequately validate user input in incoming HTTP packets. An adversary could exploit this by sending a specially crafted HTTP request to the affected device's management interface, potentially causing it to reload unintendedly and creating a DoS situation.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.