CVE-2022-20842

CWE-120 — Classic Buffer OverflowCWE-20 — Improper Input ValidationCWE-77 — Command InjectionCWE-78 — OS Command Injection4 documents4 sources
Severity
9.8CRITICAL
EPSS
1.2%
top 21.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
5
Cisco Rv340 FirmwareCisco Rv340w FirmwareCisco Rv345 Firmware+2 more
Timeline
PublishedAug 10
Latest updateAug 11

Description

Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:HExploitability: 2.2 | Impact: 6.0

Affected Packages5 packages

▶NVDcisco/rv340_firmware< 1.0.03.28
▶NVDcisco/rv345_firmware< 1.0.03.28
▶NVDcisco/rv340w_firmware< 1.0.03.28
▶NVDcisco/rv345p_firmware< 1.0.03.28

🔴Vulnerability Details

2
GHSA
GHSA-97p7-948q-cpjh: Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an unauthenticated, remote attacker to exec↗2022-08-11
▶
CVEList
Cisco Small Business RV Series Routers Vulnerabilities↗2022-08-10
▶

📋Vendor Advisories

1
Cisco
Cisco Small Business RV Series Routers Vulnerabilities↗2022-08-03
▶
CVE-2022-20842 (CRITICAL CVSS 9.8) | Multiple vulnerabilities in Cisco S | cvebase.io