cbcvebase.
CVE-2022-20749
published 2022-02-10

CVE-2022-20749: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute…

PriorityP265critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
4.01%
89.4th percentile
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.

Affected

6 ranges
VendorProductVersion rangeFixed in
ciscocisco_small_business_rv_series_router_firmware
ciscorv340_firmware<= 1.0.03.24
ciscorv340w_firmware<= 1.0.03.24
ciscorv345_firmware<= 1.0.03.24
ciscorv345p_firmware<= 1.0.03.24
ciscosmall_business_rv_series_routers

Detection & IOCsextracted from sources · hover to see the quote

  • CVE-2022-20749 affects Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers; detection should focus on anomalous requests to the web management interface of these devices
  • ·Multiple CWEs are associated with this CVE across the RV series, including stack buffer overflow (CWE-121), privilege escalation (CWE-269), improper authorization (CWE-285), certificate validation (CWE-295), signature verification bypass (CWE-347), race condition (CWE-362), unrestricted file upload (CWE-434), file/path exposure (CWE-552), improper check for unusual conditions (CWE-754), command injection (CWE-77), and buffer access without size check (CWE-785). Detections should be scoped accordingly per device capability.
  • ·Multiple Cisco Bug IDs are tracked under this advisory (CSCvz88279, CSCvz94704, CSCwa12732); patching scope may differ per bug ID and device model.

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.