CVE-2022-20700
Cisco Small Business RV Series Routers Vulnerabilities
In short
Multiple critical flaws in Cisco Small Business RV routers allow attackers to take complete control of the device by executing unauthorized code, bypassing login protections, or crashing the system. These vulnerabilities affect models RV160, RV260, RV340, and RV345.
Technical detail
Stack-based buffer overflows and authentication bypass vulnerabilities in Cisco RV Series routers enable arbitrary code execution with elevated privileges, unsigned firmware installation, and command injection. Attack vectors include network-accessible interfaces; compromised devices can be weaponized as network pivots or completely disabled via DoS.
Summary generated and translated by AI from the official description.
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Cisco · Cisco Small Business RV Series Router FirmwareWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →