CVE-2022-20705: falha crítica em Cisco Small Business RV Series Router Firmware
Cisco Small Business RV Series Routers Vulnerabilities
Publicada em · Atualizada em
100Vexday Risk Score
Corrija agora. Ela exploração observada pelo VulnCheck e tem exploit funcional público.
ssvc Actcvss 10epss 80%
da publicação à arma0 dias
Publicada no NVD10 de fev.
metasploit2 de nov.
VulnCheck+1301d
probabilidade de exploração
80%top 1% das CVEs
exploração observada
simVulnCheck
1 exploit(s) público(s)
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
Cisco · Cisco Small Business RV Series Router FirmwarePoCs públicas encontradas — 1
cve_referencepacketstormsecurity.com/files/170988/Cisco-RV-Series-Authentication-Bypass-Command-Injection.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Cisco Small Business RV Series Router Firmware
No mesmo produto, das mais perigosas para as menos.
CVE-2019-1653HIGHCisco Small Business RV320 and RV325 Routers Information Disclosure VulnerabilityEPSS 99.9%KEVCVE-2019-1652HIGHCisco Small Business RV320 and RV325 Routers Command Injection VulnerabilityEPSS 95.9%KEVCVE-2022-20699CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 72.5%KEVCVE-2023-20118MEDIUMCVE-2023-20118EPSS 54.1%KEVCVE-2022-20708CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 14.9%KEVCVE-2022-20701CRITICALCisco Small Business RV Series Routers VulnerabilitiesEPSS 9.7%KEV
Referências
http://packetstormsecurity.com/files/170988/Cisco-RV-Series-Authentication-Bypass-Command-Injection.htmlhttps://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6Dhttps://www.zerodayinitiative.com/advisories/ZDI-22-409/https://www.zerodayinitiative.com/advisories/ZDI-22-410/https://www.zerodayinitiative.com/advisories/ZDI-22-415/