cbcvebase.
CVE-2022-20827
published 2022-08-10

CVE-2022-20827: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute…

PriorityP270critical10CVSS 3.1
AVNACLPRNUINSCCHIHAH
EPSS
1.70%
74.6th percentile
Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

Affected

11 ranges
VendorProductVersion rangeFixed in
ciscocisco_small_business_rv_series_router_firmware
ciscorv160_firmware< 1.0.01.051.0.01.05
ciscorv160w_firmware< 1.0.01.051.0.01.05
ciscorv260_firmware< 1.0.01.051.0.01.05
ciscorv260p_firmware< 1.0.01.051.0.01.05
ciscorv260w_firmware< 1.0.01.051.0.01.05
ciscorv340_firmware< 1.0.03.261.0.03.26
ciscorv340w_firmware< 1.0.03.261.0.03.26
ciscorv345_firmware< 1.0.03.261.0.03.26
ciscorv345p_firmware< 1.0.03.261.0.03.26
ciscosmall_business_rv_series_routers

Detection & IOCsextracted from sources · hover to see the quote

  • CVE-2022-20827 affects Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers and allows unauthenticated remote code execution or DoS; monitor these device models for unexpected outbound connections or process spawning
  • CWE-78 (OS Command Injection) and CWE-77 (Command Injection) are root causes; look for anomalous shell command execution originating from router management processes
  • Track Cisco Bug IDs CSCwb58268, CSCwb58273, CSCwb98961 for patch status and exploit PoC disclosures related to this CVE
  • ·No workarounds are available; the only mitigation is applying Cisco's software updates

CVSS provenance

nvdv3.110.0CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
vendor_cisco9.8CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.