← Retour aux CVEs
CVE-2022-20708
CRITICALCISA KEV10.0
Description
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Details CVE
Score CVSS v3.110.0
SeveriteCRITICAL
Vecteur CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Vecteur d'attaqueNETWORK
ComplexiteLOW
Privileges requisNONE
Interaction utilisateurNONE
Publie2/10/2022
Derniere modification10/28/2025
Sourcekev
Observations honeypot0
CISA KEV
FournisseurCisco
ProduitSmall Business RV160, RV260, RV340, and RV345 Series Routers
Nom vulnerabiliteCisco Small Business RV Series Routers Stack-based Buffer Overflow Vulnerability
Date ajout KEV2022-03-03
Date limite remediation2022-03-17
Utilise dans ransomwareUnknown
Produits affectes
cisco:rv340cisco:rv340_firmwarecisco:rv340wcisco:rv340w_firmwarecisco:rv345cisco:rv345_firmwarecisco:rv345pcisco:rv345p_firmware
Faiblesses (CWE)
CWE-121CWE-78
References
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D(psirt@cisco.com)
https://www.zerodayinitiative.com/advisories/ZDI-22-417/(psirt@cisco.com)
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D(af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-22-417/(af854a3a-2127-422b-91ae-364da2661108)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-20708(134c704f-9b21-4f2e-91b3-4a467353bcc0)
Correlations IOC
Aucune correlation enregistree
This product uses data from the NVD API but is not endorsed or certified by the NVD.