CVE-2022-20749
published 2022-02-10CVE-2022-20749: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute…
PriorityP265critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
4.01%
89.4th percentile
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| cisco | cisco_small_business_rv_series_router_firmware | — | — |
| cisco | rv340_firmware | <= 1.0.03.24 | — |
| cisco | rv340w_firmware | <= 1.0.03.24 | — |
| cisco | rv345_firmware | <= 1.0.03.24 | — |
| cisco | rv345p_firmware | <= 1.0.03.24 | — |
| cisco | small_business_rv_series_routers | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →CVE-2022-20749 affects Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers; detection should focus on anomalous requests to the web management interface of these devices ↗
- ·Multiple CWEs are associated with this CVE across the RV series, including stack buffer overflow (CWE-121), privilege escalation (CWE-269), improper authorization (CWE-285), certificate validation (CWE-295), signature verification bypass (CWE-347), race condition (CWE-362), unrestricted file upload (CWE-434), file/path exposure (CWE-552), improper check for unusual conditions (CWE-754), command injection (CWE-77), and buffer access without size check (CWE-785). Detections should be scoped accordingly per device capability. ↗
- ·Multiple Cisco Bug IDs are tracked under this advisory (CSCvz88279, CSCvz94704, CSCwa12732); patching scope may differ per bug ID and device model. ↗
CVSS provenance
nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.010.0CRITICALAV:N/AC:L/Au:N/C:C/I:C/A:C
vendor_cisco10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Cisco
Cisco Small Business RV Series Routers Vulnerabilities
vendor_cisco·2022-02-02·CVSS 10.0
CVE-2022-20699 [CRITICAL] CWE-121 Cisco Small Business RV Series Routers Vulnerabilities
Cisco Small Business RV Series Routers Vulnerabilities
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following:
Execute arbitrary code
Elevate privileges
Execute arbitrary commands
Bypass authentication and authorization protections
Fetch and run unsigned software
Cause denial of service (DoS)
For more information about these vulnerabilities, see the Details section of this advisory.
Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.
This advisory is available at the following link:https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D
Cisco
Cisco Small Business RV Series Routers Vulnerabilities
vendor_cisco·CVSS 3.1
CVE-2022-20749 Cisco Small Business RV Series Routers Vulnerabilities
CVE-2022-20749: Cisco Small Business RV Series Routers Vulnerabilities
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the
CVSS: 3.1
CWE: CWE-121, CWE-269, CWE-285, CWE-121, CWE-269, CWE-285, CWE-295, CWE-347, CWE-362, CWE-434, CWE-552, CWE-754, CWE-77, CWE-785, CWE-121, CWE-269, CWE-285, CWE-121, CWE-269, CWE-285, CWE-295, CWE-347, CWE-362, CWE-434, CWE-552, CWE-754, CWE-77, CWE-785
Bug IDs: CSCvz88279, CSCvz94704, CSCwa12732, CSCvz88279, CSCvz94704
GHSA
GHSA-gr7m-q2r6-m5x6: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Exe
ghsa_unreviewed·2022-02-11
CVE-2022-20749 [CRITICAL] CWE-787 GHSA-gr7m-q2r6-m5x6: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Exe
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication and authorization protections Fetch and run unsigned software Cause denial of service (DoS) For more information about these vulnerabilities, see the Details section of this advisory.
No detection rules found.
No public exploits indexed.
2022-02-10
Published