PT-2022-3969 · Cisco · Cisco Small Business Rv260+7

Peanuts

·

Published

2022-08-03

·

Updated

2022-08-12

·

CVE-2022-20842

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers (affected versions not specified) Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN (affected versions not specified)
Description The issue is related to multiple vulnerabilities in the web interface management of the affected routers, which could allow an unauthenticated, remote attacker to execute arbitrary code or cause a denial of service (DoS) condition on an affected device. The vulnerability is associated with errors in processing input data, potentially allowing a remote attacker to execute arbitrary code in the context of the root user or cause a denial of service.
Recommendations For Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

OS Command Injection

RCE

Buffer Overflow

Weakness Enumeration

CWE-78CWE-20CWE-120

Related Identifiers

BDU:2022-04802
CVE-2022-20842

Affected Products

Cisco Rv340
Cisco Rv340W
Cisco Rv345
Cisco Rv345P
Cisco Small Business Rv160
Cisco Small Business Rv260
Cisco Small Business Rv340
Cisco Small Business Rv345