CVE:CVE-2023-20007
CNNVD:CNNVD-202301-1005
Cisco Small Business RV340和Cisco Small Business RV345都是美国思科（Cisco）公司的产品。Cisco Small Business RV340是一个路由器。连接两个或多个网络的硬件设备，在网络间起网关的作用。Cisco Small Business RV345是一款思科路由器。
Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers存在安全漏洞，该漏洞源于对用户向基于 Web 的管理界面提供的输入的验证不足，攻击者利用该漏洞可以执行任意代码或导致设备重新启动，导致拒绝服务 (DoS) 情况，以下产品和版本受到影响：Cisco RV340 Dual WAN Gigabit VPN Routers、RV340W Dual WAN Gigabit Wireless-AC VPN Routers、RV345 Dual WAN Gigabit VPN Routers、RV345P Dual WAN Gigabit POE VPN Routers。
solution:Upgrade cisco rv340_firmware to a higher version than 1.0.03.29,and avoid the version (,1.0.03.29); Upgrade cisco rv340w_firmware to a higher version than 1.0.03.29,and avoid the version (,1.0.03.29); Upgrade cisco rv345_firmware to a higher version than 1.0.03.29,and avoid the version (,1.0.03.29); Upgrade cisco rv345p_firmware to a higher version than 1.0.03.29,and avoid the version (,1.0.03.29)