PT-2022-2291 · Cisco · Cisco Small Business Rv Series Routers

Pedrib1337 + 3 · Published 2022-02-02 · Updated 2025-03-13 · CVE-2022-20699

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cisco Small Business RV Series Routers versions RV160, RV260, RV340, and RV345

Description The issue is caused by a stack-based buffer overflow in the SSL VPN module of the Cisco Small Business RV340, RV340W, RV345, and RV345P routers. This can be exploited by a remote attacker using a specially crafted HTTP request, allowing them to execute arbitrary code with root privileges. The vulnerability can also lead to elevation of privileges, execution of arbitrary commands, bypassing of authentication and authorization protections, fetching and running unsigned software, and denial of service (DoS).

Recommendations For Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, update to a fixed version to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Stack Overflow

Buffer Overflow

Weakness Enumeration

CWE-1284

CWE-121

CWE-119

Related Identifiers

BDU:2022-02475

CVE-2022-20699

ZDI-22-414

Affected Products

Cisco Small Business Rv Series Routers

References · 26

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/misc/cisco_rv340_sslvpn.rb · Exploit
• 🔥 https://github.com/Audiobahn/CVE-2022-20699 · Exploit
• 🔥 https://github.com/rohankumardubey/CVE-2022-20699 · Exploit
• 🔥 https://github.com/rohan-flutterint/CVE-2022-20699 · Exploit
• 🔥 http://packetstormsecurity.com/files/167113/Cisco-RV340-SSL-VPN-Unauthenticated-Remote-Code-Execution.html · Exploit
• https://zerodayinitiative.com/advisories/ZDI-22-414 · Security Note
• https://osv.dev/vulnerability/CVE-2022-20699 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-02475 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-smb-mult-vuln-KA9PK6D · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20699 · Security Note
• https://t.me/cvenotify/30138 · Telegram Post
• https://t.me/cvenotify/114729 · Telegram Post
• https://t.me/cvenotify/87232 · Telegram Post
• https://t.me/true_secator/2591 · Telegram Post
• https://t.me/cibsecurity/37236 · Telegram Post