CVE:CVE-2021-1289
CNNVD:CNNVD-202102-356
Cisco RV160等都是美国Cisco公司的一款应用于企业环境的路由器。
Cisco?Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers 存在授权问题漏洞，该漏洞允许未经身份验证的远程攻击者可利用该漏作为root用户在受影响的设备上执行任意代码。
solution:Upgrade cisco rv160w_wireless-ac_vpn_router_firmware to a higher version than 1.0.01.02,and avoid the version (,1.0.01.02); Upgrade cisco rv260_vpn_router_firmware to a higher version than 1.0.01.02,and avoid the version (,1.0.01.02); Upgrade cisco rv260p_vpn_router_with_poe_firmware to a higher version than 1.0.01.02,and avoid the version (,1.0.01.02); Upgrade cisco rv260w_wireless-ac_vpn_router_firmware to a higher version than 1.0.01.02,and avoid the version (,1.0.01.02); Upgrade cisco rv160_vpn_router_firmware to a higher version than 1.0.01.02,and avoid the version (,1.0.01.02)