CVE-2021-40120

CVE-2021-40120 is a command injection vulnerability in the web-based management interface of several Cisco Small Business RV Series Routers, including models like the RV016, RV042, and RV320. An authenticated, remote attacker with administrative privileges can exploit this flaw due to insufficient input validation. Successful exploitation allows the attacker to execute arbitrary commands on the underlying Linux operating system with root-level privileges, leading to a high severity CVSS score of 7.2. Despite its severity, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.